last executing test programs: 5.151487289s ago: executing program 2 (id=4338): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) (fail_nth: 1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 4.231071763s ago: executing program 4 (id=4346): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x0, 0x4) (async) socket$kcm(0x10, 0x0, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd6589d1603a3b92caf5835bdc3b9f4245eaac8cc0f16391ad4d62c5d1d46e11f762c56f5f7951a70cf0cc8a7308931316a9557e7e43f6fba62686d63f383a2359570943959525ddb0b8de158d7106cb28907404b55a0c9250e6e9c9245d83d9136a94bdc949dad7b86c797bdf2a0aaead851ab12c89dfbfb4ac6588081f61175d86ef4346c55543554bf2ed231ba5ffade30282") r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000018000000000000010000085000000230000009500f2ff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000a020000000000000000000001053f0000000000040000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c0c1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.529051554s ago: executing program 4 (id=4351): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x9, 0x5, 0x4, 0x608}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe495, 0x0, @perf_config_ext={0x6, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000300)="b9fe130768045c8c989a14ee88a8657986ddd510e921ff2e03d235c95a9ed6fcd93f99fa4e71a5ba4611bd8a88fb905f4dbd70834b17", 0x0, 0xf5d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r9, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r10, 0x2402, 0x0) 3.230114591s ago: executing program 2 (id=4354): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = syz_clone(0x100, &(0x7f0000000940)="44a547b8506f2c084d9686054e732588cfa178abea6fe3411cf663e202f740ec5a4f471e64f1426e96531b4ebf6fe7456deb991e48c7fced337897055e2a86c7afa2bce89054d1640912d4610041ae5593c3eef4195de60e4a4bc5a0af2a760fe52f229a1198c4c5d4d39bbd46a24b39982af76013c966d6701781b4870a0f643df9b3ebb5ea54d217f27a859f113c9f5414c73a8d5381e559d42b50fa21b1676741f977681327a841ab2a883960dea78aa2765f33a4f5d449e69f43547f92b6b58599a50bba28b1b9d3dcf04f0dcfbb4b53c790f636583d089ec1c210815f9a142ca8a5d4f365a04cb7ecee42ebac48904ffab97277da0a8019c1b6704fbe32cfeba047de10784b63ae1bb426dd940af3b0359808ba9d386935b776e5afd37715d21b75b202b52f08c05d24d68f19157a3ae44f629a4a6005401a0c8e9f905f7070b9f94b3ae002511f8fdd99220c577a2c1fce915564f4228cd11ec1113c85274a50a682ed77c51b6eb3485f1d7aa8df8fb2518fbf8add7fbee93e5589374b0a745a6ec2bbf6c4c9babcdf23d2bfde33fc0e90a86c1d58d2a3462123ed8cf21e84ed94ea664e58e3f9c5af4b630e54fbb16237dfbcbad45595dc27f96b01030d19aeb03e5eee932884dd79ebdfa668df04097d991a965c3aad3bbfb696d14a4cd193b37ed365582a41b507a471ad14a71f4a419d5a340b11da422444e409c512a34433a7069887b5c83b825c967557df940710d81a94d3049b3da0a562e0caa3f848df3e6a3300196303360ea8f69ef4ff7bc59b3a705e20e2ea6f7064e922230cf617660c62f7468aef5f25d9e9423957e782e467aaf3365939fd4ba4b750fdc2e4703ebd5db18aa8921f91e69a0b279ff53a16652e93bc7f51b640a00ad5f727ad1642d22e20319a0da9ad3ccfa436a492a335bfa82a3c60bf1a0aa9996f80efe59fe47ad1266ba7054762d24220b60d7806f1d07599a4a89975dac273f4831d4b74d0a4818ea7f15223c945a5992e0479c279a5345eaba9386484fb43e46292f0be68edecad4fb433dad0f236255f140c2006ffb9bf2c5692af2955d91455a096b255c40276b63c637b84238c9368880277d89cdae26d550c9001ee4c2bdc793a12cb00cb4da6e08c8dae751e2c1d6a883f1697a73c9eda2614b76e420aca9da450b900dabc150cd12c5a1dad7a711dc6688f4116e210084160afe40bb92dda9ec5925cb20da2510d5fdbe0aeaa01325bed2adbf5c7e6421f78cf645db0de4315a83ccb95375319a4274559b5850fdb7610b08d3233614ba79b483e9c3f15f09ddede16c2fa49cc3e583d1601149ba0be76f4486ff3b23cc6c6599f57696a06b3faf36896910757f0f992556a5283356eda335a82014d912fa8ac0190b00d88733c7d6f6afe1968895c3643d976e17022982b8546bf5096d657c85de555aa4ca8f68755589cb8f106de1337a9d4c5b8d8756f1099580b93635ce785279aac163841d5c73002664acff76fa8572b2fe6f6d32d625d06fbe19f432480bf6afdb11d06127cf0d27e54e1ca856482e92a15de42aaee0bec975831161163e2bf1db5516d6e27c8ccaa4c8a9df7243beb4e35ea77df262fb6a9e0f2b2c2bbaa51a24a1299575edb0e2be9782e20c50352af5908b0e3ad29b5193d88148c2e7bd99105f3dd1c128479be51abcc753281d697fc728145880af95383ca8afdf467fed68010fc3452f9fa9c455b58adf4ab7e096040ca6022fc5210580e31999d2a627a304bb1ac627bb39c5b3bdde47ba5c654a02ca9fc269aa75ed9839305d0b25a66c60f0613fcabb16756dd39290a7e9b6222539ac7fceefc445266e1a1862b2df2112ca81af09e41495eb72da18d1f559f26d8b2e60926dbac9faf53f2b38cb9be20a45fc01a0facba2fbc70355aa61f7f0ad12405cb3b1c2810040a205f79d88ac0c73406ac64c228fbd4b5399ef64b471f2c290a490a3621b6dc8c8c435018648848b678ab74d697356da028e0e7c8bb2b892831ff9b7ae951fe2f9c63d0ceef54a9c2b1be6a3fc2eb6ae23239a9edf6576e821e32f49581ffb15ab180ebafb035c204def795ad4a60e2a56bab9f6931316d3bd72a1ae03cbbbd2abc0aa489c21e097d95f5594f6bb480548a4f22393ef041fc3edf95dcff43f6841b81bbbab6f27e0abfbe20e3739d32c0aa07e54efa243d044f82ef5eed2d1c36d88174e8a2161c46035d8df654354bf9360cd9af6260eb60029cf2ebd27806632e313d2cde1262562251073f4436fbe697cc2a6d29e0b8cfe406da6042918684cd1baf506b280058795d68f30e2eef1742ca343f9063363644a00470568b57bb3b6138a361806102f03a4c7081f1ae4c34e36f7ffe5b5b7618d5b16fb837789120e84be579d8319ca421d119ceca1c84941f4dfae3ce9753b0bcaa0298f3017b4515f8c6a247c5dca9e7fe9fe10b9da97fec6c39e49bada22b0eae3e8d3d13a56115fd42b343cbc599b33845cab4e9ddf0c05d53e3cacfec2bbfab738df4c90c830528b43e31cd5d0ec358542daa106cb69d5852b72974c492cab773663e282fb51205bbce0b217256497c8ca34985c92a84007e49e3e07d68ffb09e4f6266e497606e53e0ae1198c27d4f8f470e55ebdfd3f892cc0abb5e7cbcf86619c7ca01b64a27913439e7cccb90b742b620caaf8f4bb71272bec2c855685aac45750f909e6ef72650bc0b5027e3e14dce0db8f9495bb7d7c93933480b1615f8103045a0ffc19d2da0a3ba1c9028826c9e74a7aeecc707caf04afc3668e03efa2ad2d53de30df7d8bbaa039e00147fd2fd6ca93b193c6040e6cf71cf26b41d2055be9729edcf04d0c12d51254d9fe44674fbdd3c8549ddb86d3c6cfdc4342e2196c8e48641c08e4ca88d8c80aa95ff6d5ef7d7fc452cf21f0cacb3ec900358d954df04c2eda14c0888792d52bb277702d449e493da547b36ed3c46f99c7029b947617442d4ce0dc29d52607672c24f1c53cfb6f133ba99ac4421aa5077585a4fd33e92716c9a8eaf854b157b1d9da06c044b8774089b9821b6723d364ebbefa570d357a331043459298f05c626e25eaee2916f469c781d5a873c1d0eed19cfb4c5d571e62b878795e92b8f56991356592f0b16dc6d2a2fc70e58729f226b88c5fd25f975ca9c1773f3f1a37694d0d34d2919ea1807174d873bf2e1473e0484d55d5428e59c52dfc1c148d1610972259f12030acc0d5c4f032b1da36afafe0e9c7dec8cfe24d12f57919ed9101e964efcecb34c79a58ebb711b40e03d3d559797605f731c113ef39567d1895dd38fa23ae5f28884ae59db31a4351c58606a66053fe8ef45a8d8972e7ab901dfacd4b6f46d313f65033122f18d6c3f8b361e35dc101cdb39f75c6fd8dd127fb913d0ad88f9e4aa480ec4ed46d8f90fa746d51107aa2c7a3d870e57672cd7e4947fcb4792eff69d812731827d3d090c6ec6d680ad11497507a60bccfd0898d5e08c3ca816c21bc050ba241954a0a58a0c1392796f21f90dcd2694bb6300f5253e2fdaad3fe5c8d589c181af8932b6b9f8deee7c19c339aa8886ff3e9d444643082a1f5253e3164e71405329a8fbf590dd781f6b35cf57a40a8dab8aefa6e63934927c6bad11259b79c52b9c1fa18ed541f15c9078cfc2f030869d66771c1edee151bc2794030a9a8d59727ed964d8a1b011f1b0f8f97d1b7553b32a9d5ef55b69f845b1da001d24758f8691046be6b6c614dbf64dbd52b78025927ecb7e1aedea21358b93d4e7192066e97b7b8591fe0fbc6ca90167fea697ea5bcd75c0064bcbcfbed8e6518ebf5591024545a373d08005a9848ff46339725035f31fd09e807f3015f3d37cc83aa9c240b7101fb3e94c38e68c7b54558c2deb49d39e9fb520a8a9b4fe7dbaa96e1569beb671d63e2b74fa1e801d133c6b068df6dbd819377cdfdb3c9d5faa327f4600a45ac5d962543022fad3182854fd79f8c7e913d48b4c29f0ce799a40e6331134bd72984819855c9f1b4168d30a9b6516dd9f8f1045056a11c4aaba92b9daf848d424a169fd661ce5d69285e92bef37df393440213639aa223690c2fb044929d2a2b656ba025f556806e12fc78d1c4946bfdd22a344f7d45c62d7e3000acb5d0ee1049a0b5f572a3fb9cdecf247042b5f597fe24c0feed29f5fa68ef3f08254f0c58c71abdc5fac3636c318ce40d4682d2931bffea5527d55bb9df2c033c83ca47326808c0f2ab69d65f203f058023105311995229e6cfd1ce66e855ffe9d9bf2d990ac98ae5d677ebbbba8aa34e6f524c026e348bad3aa3f42b16f14b1be9337107418e125a542b65beaafa8203a2651cca2625eaf42e06dcb109633e9a5b89d111c8ab95f9760bb6a3d9a944eb359a6ef21738d6d57b5364d5b2731a8945de7c566d145ca3de3598dde6df33c4261f8867169e7ac06913b3829759b389d2f8b09e12f36b213b2ca8e6b6019a00ed7d45d915d3cf336f2d2d3b4f3556207e275e2df7fb17985e831eddaa7a5f13a52fa755820b8e940a8e7664ed0f78dd55e9ddd32e4baedbf00c34f57a00c0f65d6081b63ea67064557f1e710c436f3b563efbe2d9da6b56c67584b085a4478b3eece233fa59b79fa4beb28f9c6eb0a79681b81ac9f2621ae2969c6e8d684069688f6c04f50b3e47a2d2556a10d36698a78f86906ca56193bd854c4d1a5d34d240fc82b3044b662a4d658a92f6777e3cafc6609ddc11647fb7bc7f94764ebc017910171b0bb40da074114bae7f74402631c185c61f7b2b9e152d4b76b6f649cae2154c29d7f08c2aa1820f7ed89a073824305524b4bcb3cdd288b0f5051c998b195f7741db6ba82dc03804429ac464cb2439446f6d976c150d50d143c88fdf1c81dbf1472f0c4b6e396addba86c6180e982261f16c11e1f06267e7aeb37fce6c4b497d11e541af498e236541253a456383878bf711dedc75cad5ed316d851523cfb23cde1d1e29e8ac9c9302f086410d6c2cfd2bd4a04f2a43904b815ec0df035d8c19a64f9ae15f34d891055dbc6075b874e8231fa2c1290b063e86f6f4d0ad2b7a12a29056fa8979093f1b792d99c89c882efacbc54e018413c4aad20c07914d02e809f005f83441861367fa763895c096a911e496a9d4185fdd062912c2af887dd3e3faab28564219485267f202230e632c8db7fa5ae0560740aa696aada99d410a8b5a9fa0e1d4af49ba6833b6f514fa713ffd61552e2986dbedebdfafaa65833b6ba8447ce778622683c6d30914eafe225e5b8ba029a3c248c489ba8a4e1e1099789fe6e25b0425ea8ef876f9a164fbe790154062da76370a2b52bf3b22d0d950a1cad1123b92f8112c66b3a5934b1de024c934a6787bcb6a3d8d4fa9f62d03728f37634459b8ba052890c79e24ed2b6f47e1ee76e15b79de0b061eb2cdd63a2b16d99017169829774ada563036ec176cfc8cfbadc10f0dc9c4cfc0b8c8a58ebc19547354e2c046a3510992a39e13051da1fc5210dadaddf490c04adf91152c9b9e2d12de4cb66dc9edd98fbb7a3f1f1e30895c3ed5db8e5662bf9cc4431f911620d92e149855d0aa4721d7974d700deed69cbf0f689e4443c009144520052c058cf3fb11d94f75255b623c05e17beb594ad6c3d28204b3d8dd8a00adfb3a3727fa5ee7a641abb331216e90f2be7e63454e3543a4b4e3b51aef9b920212f0dc4dc2fbbd7e33127a7994ffc78a5f6c2538be4926f62f9c744bd9ac45d0376f3c550f2114a2efe35975e103a54e32289f04dea12953a6b1a068b8a86f33d97e6a4d54999", 0x1000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)="504c0baf3354b72464562213cf5a605e1fc756ae4cfff79ffe918e57a0aa6e45a5d9210ba4b00ce14f5a2ba90c993ada8830bc80211e895f12a3cab5d4cedb145b36be3525d20b08805fd5fbb40ee3bd942e4f4b0e2ba3cd6f441c1ae8783e5b7ef0a99df80495560db4e8be1e6272f98bc1a7b7c432978d4405807dedc94f") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r3, 0x12) 2.431245728s ago: executing program 0 (id=4356): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(0x3) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0xf5, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000000562079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca7780d38cae870b9a1df48b28c18804a5bb1d3f5c01496ace2d14afbf79a2283a0bb7e1df126c3acc240d75a058f6efa6d00"/245, 0x0, 0xfa, 0x60000000, 0x12, 0x51, &(0x7f0000000040)="e18dfbdb7297a54e4e062b311453dcbb62932a01105d0a8066ea8e5e1f2f575d0d6e996b57fd408d420abb7337934e09005d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fc8090f586e979858f64170cde36889dcc8539fd7e10733363e9e65f740c791a09dfd0657580b2d2d5dcfaeacee366e6fb0f94304f9ee64af01f65e470000000000000000", 0x4, 0x3}, 0x50) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.081611538s ago: executing program 0 (id=4359): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1100, 0x1, 0x8c75, 0x1, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'some', 0x20, 0x5, 0x20, 0x9}, 0x2f) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x400, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc, 0x9, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.014529932s ago: executing program 4 (id=4361): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000040)="80370b40afa2820ac98cefe5cd097b9307e859bd5f570736e66b0b00badc426f33", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x0, 0xc, 0xd, 0x5, 0x7}, @call={0x85, 0x0, 0x0, 0xd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @exit, @ldst={0x3, 0x2, 0x6, 0x1, 0x9, 0xfffffffffffffff0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x5e, &(0x7f0000000500)=""/94, 0x40f00, 0x6, '\x00', r2, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r3, 0x9, 0x0, &(0x7f0000000640)=[{0x5, 0x5, 0x8, 0xc}, {0x0, 0x2, 0xa, 0x5}, {0x4, 0x1, 0x2, 0x2}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x5, 0x6, 0x4}, {0x0, 0x4, 0x1}, {0x1, 0x5, 0x3, 0x8}, {0x4, 0x4, 0xc, 0x6}, {0x0, 0x4, 0x7, 0x5}], 0x10, 0x1000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x3, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.797642175s ago: executing program 0 (id=4363): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.618777735s ago: executing program 0 (id=4365): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000020000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r5}, 0x38) 1.350897951s ago: executing program 4 (id=4368): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x140021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x5, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfe, 0x10, 0x4, 0x1, 0x0, 0x40, 0x90800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x67406269badbc2f6}, 0x0, 0x2, 0xb94, 0x9, 0x2b, 0x5, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x7, r0, 0x12) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d2f, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18880000000000000053181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200f5ff0300000008000000010000008000687b", @ANYRES32=r2, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb664ad3f48b9e0b0", 0x36}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xe, &(0x7f0000000100), 0x4) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/205], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x88, 0xa, &(0x7f00000002c0), 0x4) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0900000000000000cdc1c5c17016712000bfb2", @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x40) 1.343330912s ago: executing program 1 (id=4369): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000804) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4, 0xb1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0x11828, 0x1, 0x80000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff0000, 0x9, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.155378363s ago: executing program 1 (id=4371): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x1, 0x9, 0xa, 0xa, 0xfffffffffffffff8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x5, 0x3, 0x7, 0x2, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x8, 0x1, 0x8, 0xc, 0x97c4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x101, 0x64, &(0x7f0000000300)=""/100, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x3, 0x2b}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[{0x0, 0x5, 0x5, 0xa}, {0x5, 0x3, 0x9, 0xa}, {0x1, 0x2, 0x7, 0xb}, {0x1, 0x5, 0x3, 0x5}, {0x4, 0x1, 0xc, 0x2}], 0x10, 0x2000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x0, 0xeb, 0x92, &(0x7f0000000500)="59fd7c9e63da4a5e9fc91fa0a367ad38e664ecba4c57e566c8de74f4ea6a3fadc6937ee692a03aa665b2841b37ec96e29d7802daca16cdcf3e1d2e6f7a9fdadca45bbe7d66163e1cb5a9ab003ac34ee2a64f133231004ff675fdd06082c260832dcd2821466d086e44fad6e837c522c5e71fea758139920d6cdd6f1acf82fe731f19ecb3be37696b172aadec96f985a0172b64e10437edfd82ece20598f8afc1f4ce02a958ce12ecb5fc611f726e612a79a67bea7fc13dc68133b582b17a527eed90335a843b5d14672897e89ff67eec56c4cab64baaf45bbffd9da53ff88acb223c79e2cc3d1bc2b8dfc3", &(0x7f0000000600)=""/146, 0x1, 0x0, 0x5b, 0x23, &(0x7f0000000700)="c49db9a4aa101b0eb547dfc67aa871ea5c0d6724d46b602c7c817e0d85101604a9aaaa6ca1dbbab60d56c9825fa597dc6812fe04c8d9e5fa1592a8883d5853b50a73935e7db4e0da440da008deebf7dc400109d68172e81161538e", &(0x7f0000000780)="781e9da9b082f316fdf19886f06d3d85e30404a06da311c02566fbe9d8c74bff5ec64a", 0x1, 0x0, 0x1000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000009c0)={r6}) 1.120410245s ago: executing program 3 (id=4372): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xb, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000640)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x894) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1f005807}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r7, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4ae"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socketpair(0x26, 0x5, 0x400, &(0x7f0000000000)) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x400000002, 0x0) 1.03097956s ago: executing program 2 (id=4373): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1100, 0x1, 0x8c75, 0x1, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'some', 0x20, 0x5, 0x20, 0x9}, 0x2f) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x400, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc, 0x9, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.03054011s ago: executing program 1 (id=4374): syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) r0 = syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x4000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) (async) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) 1.005309312s ago: executing program 4 (id=4375): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1, &(0x7f0000000740)=""/154, 0x9a}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000208500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 898.564807ms ago: executing program 1 (id=4376): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2c, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200480b1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) 812.943653ms ago: executing program 3 (id=4377): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x10000, @mcast2, 0x1a}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000780)="80005b020eaa", 0x6}, {&(0x7f0000000000)="874de9717fee1648b589b46c23ab4152a73fb462efcee0789dbcc3056363280de40dd6e34e029e0b744eca9e193c678233e53401a7d0d6f6c9a9bee4192ddc099752775f14534eb0964dddce5efb212d9cd37d0e1b47ba", 0x57}, {&(0x7f0000000880)="fab9dcb3ac4238f1c6b1a499b5f3c7ad8b8fe26dd1c4eb508a9350e02aa57ff04b5017afacf8f9ecfdb832d116f958c21ccbaedd072c105673bc35f4a1d142acd6c5031cce85b7b4e0cfafe6f191cc82ca1898079a5841202a01d38d04c220ab6ebff97248ee1ef80db6a35fa441aef182879405007b3d562baa743e8a590e8189ea4eb37e65800ad22f2b80170263690558217217d86759fdde16cb71aec86a0e238f5867a789334b1dc1a84c45ea07e49fc55c1180b2999ac36a2dc3c8fb3add605f5fca4fd41e3ad85b4bbe080d5de8ab5d7f8f0b4953dde458bead70f93a6149195e14004b9a51801ce0ef1e41a93af7615c89295aefb26dd94c02da58f801258e03076991d5f36d29b5f1f703863aaae0b2f73d9ebc50a6264d5457b405b4c6b0a7f9cd138144abac066ba439b34d52f7b3639eb9c3650e17b7b11372c5da56c23f43042e654a15e257ac9ee5baa04a900a03b082fefef541ff81d348dae0e29dc7a02721b02e856b03f292225847e358f1c747f171612daec2c9e04d55193034d5e9d43a9c4071f5dc681180000000d96bbaa564564e87c02d0c0bd6cc2de2b9dfc96c021e6197fa257c4112e6a7b6e14343062ed71cbc9db0bf95fb74bb51c3719e6327f24efdb2380e3b66b7fee3c4c287d733e1f41e265de9ca7d5c2886c59ae6113f2f87de8c2995a339a2f94562473b1e989e12b1946f2e9fb58f8709555d7db6c52d6dc08821076642056192a9983d545c076fd5d8d0f407e56104f42065fe6c8e7abf618d276646bf46f77b38af0664916ec5671b5ce686c2ad85fc8482011d95ec5d2927278ac857a8a5cf35a9ebb14d06d3c6dcf6410721e0737cfe3d4d3ca248b0a38ef6f34980d36ac24f6e8c8b78ab437f6596a972836aa85e9304e9c134081f50a62332debef0a7eeebee2a94fec4bb21a26a20c80e3b02fa2aae59766597aeaabd1450b356a8f0725a4526fe6eb2bed88da1e5c6ea53370a8d2d203425fee89ced81a5a029293161ff3c8ebf1c42f26e867efb500ad9edbdefa14c97422807e205111f9f3e5f4d3483b449f9dc724e6b3d0d9ea9fdd85d0e47c6889ecaefc551e3bcd35ae0b519a6992e4d6666dd304f60f0d7ee4ce902a12065c0f174e7127297dfca2197d9020300000000000000bf6b5e181f3b97608020da4db052ffe3efe1480a7b2830fca5e6580dac5b0c475937762901e2c159cd34d33c137d874174fd7ccded458e5b8a532ef67aebf9f3eed7f0e34ea74f34991a6a493c9f0cbd57ef86d13ae225d1c09f12f6a3a38599fd414cb0d82ee77cc0e2085140306074c33cce123693655e5ee1bd5a587270583a67fdf08507b36e84828e8a7b58bbbcb28b3717910af53565fe91f17122d360693c82e5233fc3a0ae3026f4ad2777fbc4929fa44ed0a76c297bb851e88c5d318dd24cab4a361962666d28c349746cccd507c4263feb44b5fda7cbe1d11e9d6da05a831a75b08e62eaf1bf04ca05239e5da30ffc884fbaa0042983784c1bf367b606280b61575e9f54d2fc5ac2b1774749eb42b4ded0037966f259166b48f11195835176a930b7b706fa44d6c471897908e1597d9044e722eb77cc11917084f6164cce71e7d2a79250ab", 0x483}, {&(0x7f0000000380)="14", 0x1}], 0x4, 0x0, 0x0, 0x900}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r2}) 717.706738ms ago: executing program 2 (id=4378): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100)) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0xff91}, 0x30048880) 704.333579ms ago: executing program 1 (id=4379): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x98240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00', 0x3}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 663.878781ms ago: executing program 3 (id=4380): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x10, 0x9, 0x4, 0x6, 0x0, 0x0, 0x820, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000040)}, 0x11669, 0x7, 0x10, 0x4, 0x400, 0x10001, 0x2, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xc, r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000400007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x0) 585.766506ms ago: executing program 0 (id=4381): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901ea6c0743bf80d72600000000009500000000000000bf91000000000000b7020000020000008500000084000000b700000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x4, 0x5, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x1ff}, 0x94) (rerun: 64) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000840)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2f, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3db}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xb, 0x81, 0x18f}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r3, r3, r5, r3, r3, r6, r3, r3, r3], &(0x7f0000000a00)=[{0x1, 0x3, 0x5, 0xc}, {0x1, 0x5, 0x10}, {0x2, 0x4, 0xe, 0x2}, {0x0, 0x3, 0x3, 0x5}], 0x10, 0xfffffff8}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x9, 0x0, 0x2, 0x4, 0x0, 0x5, 0x80, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3a, 0x2a}, 0x8, 0x7, 0x2, 0x0, 0xf, 0x1, 0xa9a, 0x0, 0x6, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, r2, 0x0, 0x4, 0x1}, 0x50) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000004f4ff0008000000050000005700000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r7, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) 498.215891ms ago: executing program 2 (id=4382): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000804) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4, 0xb1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0x11828, 0x1, 0x80000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff0000, 0x9, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 492.149331ms ago: executing program 0 (id=4383): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2000) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x5450, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x24008884) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r7 = gettid() perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x92b}, 0x100000, 0x0, 0x2}, r7, 0xfff0000000000000, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) 419.378385ms ago: executing program 3 (id=4384): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x88, 0xa, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="e22d4d1c", 0x4}], 0x1}, 0x4040000) 418.851845ms ago: executing program 1 (id=4385): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc35, 0x21200, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x100040, 0x7ffffffe, 0x5, 0x0, 0x0, 0x400006, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x3, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x2408, 0x0, 0x0, 0x7, 0x4, 0x63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x40, 0x0, 0x8, 0x3, 0x0, 0x1ff, 0x92820, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8210, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x72, 0x2, 0x8, 0x0, 0x7, 0x2c22, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x673f, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8400, 0x5, 0x8, 0xc0964dcc512b1d44, 0x9, 0x6, 0x3, 0x0, 0xb4000000, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000700)=""/195}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x6}, 0x0) sendmsg(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x180}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0x10, 0x2, 0x0) 418.449926ms ago: executing program 4 (id=4386): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ae, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) close(r0) 319.101781ms ago: executing program 3 (id=4387): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x4) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000c"], 0xffdd) (async, rerun: 64) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000009ac38c19a6e1eb5500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="182500007aa67f46e3f0e513db64329334b0a3226dfeaf11f3bac8658d6118bfc95fad8b887214a1521cc3064b4a8465b8283823061d58480e866832ec49774383df", @ANYRES32, @ANYBLOB="000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005e0300008500000006000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x3f, &(0x7f0000000300)=""/63, 0x41100, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000680)=[r0], &(0x7f00000006c0)=[{0x3, 0x2, 0xe, 0xc}, {0x5, 0x2, 0x2, 0x7}, {0x5, 0x3, 0x1, 0x1}, {0x5, 0x5, 0xc, 0x2}, {0x4, 0x1, 0xb, 0x6}, {0x2, 0x3, 0x10, 0xb}, {0x0, 0x3, 0x5}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x2, 0x0, 0x6}], 0x10, 0x80000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) (async, rerun: 64) r9 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff54, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x4) socketpair(0x1, 0x5, 0x101, &(0x7f0000000380)) 646.14µs ago: executing program 2 (id=4388): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1100, 0x1, 0x8c75, 0x1, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'some', 0x20, 0x5, 0x20, 0x9}, 0x2f) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x400, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc, 0x9, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 0s ago: executing program 3 (id=4389): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2c, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200480b1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) kernel console output (not intermixed with test programs): an_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.906664][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.916750][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.929197][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 328.947854][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.989079][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.016653][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.040020][T13051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.071438][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.101061][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.123907][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.166664][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.197838][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.219831][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.250314][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.282823][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.313842][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.329350][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.350011][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.378722][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.401914][T13051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.795584][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.810070][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.894710][T13051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.934896][T13051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.968864][T13051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.006402][T13051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.052495][T13348] delete_channel: no stack [ 330.196438][T13359] __nla_validate_parse: 7 callbacks suppressed [ 330.196454][T13359] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2945'. [ 330.251684][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.271474][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.285644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.285752][ T4716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.326134][ T4716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.348363][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.706373][T13381] netlink: 'syz.1.2951': attribute type 2 has an invalid length. [ 330.731866][T13381] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2951'. [ 331.011924][ T5883] Bluetooth: hci5: command 0x0419 tx timeout [ 331.521768][T13412] netlink: 'syz.4.2965': attribute type 2 has an invalid length. [ 331.588550][T13412] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2965'. [ 332.052547][T13431] netlink: 'syz.2.2969': attribute type 1 has an invalid length. [ 332.086603][T13431] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2969'. [ 332.392938][T13427] chnl_net:caif_netlink_parms(): no params data found [ 332.451216][T13455] netlink: 'syz.4.2978': attribute type 2 has an invalid length. [ 332.487320][T13455] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2978'. [ 332.525901][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.533484][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.544312][T13427] device bridge_slave_0 entered promiscuous mode [ 332.553840][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.561311][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.570494][T13427] device bridge_slave_1 entered promiscuous mode [ 332.607903][T13464] netlink: 'syz.1.2979': attribute type 3 has an invalid length. [ 332.618439][T13464] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2979'. [ 332.685527][T13427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.721101][T13427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.815977][T13427] team0: Port device team_slave_0 added [ 332.838301][T13478] netlink: 'syz.1.2983': attribute type 21 has an invalid length. [ 332.860409][T13473] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 332.873162][T13473] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2982'. [ 333.092049][T13427] team0: Port device team_slave_1 added [ 333.130946][T13427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.137918][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.183305][T13427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.201741][T13427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.217074][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.311443][T13427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.461017][T13427] device hsr_slave_0 entered promiscuous mode [ 333.486261][T13427] device hsr_slave_1 entered promiscuous mode [ 333.523746][T13427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.532379][T13427] Cannot create hsr debugfs directory [ 333.610575][T13497] netlink: 'syz.1.2990': attribute type 2 has an invalid length. [ 333.636766][T13497] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2990'. [ 333.723676][T13499] FAULT_INJECTION: forcing a failure. [ 333.723676][T13499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.800744][T13502] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2992'. [ 333.807581][T13499] CPU: 0 PID: 13499 Comm: syz.4.2991 Not tainted syzkaller #0 [ 333.817390][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.827445][T13499] Call Trace: [ 333.830726][T13499] [ 333.833660][T13499] dump_stack_lvl+0x188/0x250 [ 333.838338][T13499] ? show_regs_print_info+0x20/0x20 [ 333.843531][T13499] ? load_image+0x400/0x400 [ 333.848034][T13499] ? __lock_acquire+0x7d10/0x7d10 [ 333.853062][T13499] should_fail+0x38c/0x4c0 [ 333.857479][T13499] _copy_from_user+0x2e/0x170 [ 333.862154][T13499] __copy_msghdr_from_user+0xc9/0x630 [ 333.867524][T13499] ? verify_lock_unused+0x140/0x140 [ 333.872733][T13499] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 333.878027][T13499] ___sys_sendmsg+0x19a/0x2e0 [ 333.882704][T13499] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.887472][T13499] ? vfs_write+0x8b2/0xd60 [ 333.891896][T13499] __se_sys_sendmsg+0x1af/0x290 [ 333.896749][T13499] ? __x64_sys_sendmsg+0x80/0x80 [ 333.901689][T13499] ? syscall_enter_from_user_mode+0x2a/0x70 [ 333.907582][T13499] do_syscall_64+0x4c/0xa0 [ 333.911999][T13499] ? clear_bhb_loop+0x30/0x80 [ 333.916667][T13499] ? clear_bhb_loop+0x30/0x80 [ 333.921335][T13499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.927220][T13499] RIP: 0033:0x7fdfe8208cb9 [ 333.931630][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.951229][T13499] RSP: 002b:00007fdfe6464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.959634][T13499] RAX: ffffffffffffffda RBX: 00007fdfe8483fa0 RCX: 00007fdfe8208cb9 [ 333.967596][T13499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 333.975555][T13499] RBP: 00007fdfe6464090 R08: 0000000000000000 R09: 0000000000000000 [ 333.983518][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.991478][T13499] R13: 00007fdfe8484038 R14: 00007fdfe8483fa0 R15: 00007ffcb3b5c6f8 [ 333.999454][T13499] [ 334.004374][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 334.041929][T13427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.128257][T13509] device wlan0 entered promiscuous mode [ 334.241908][T13427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.294448][T13514] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2998'. [ 334.360034][T13427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.639680][T13427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.663835][T13427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.676806][T13427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.696790][T13427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.747961][T13540] FAULT_INJECTION: forcing a failure. [ 334.747961][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.762797][T13540] CPU: 0 PID: 13540 Comm: syz.0.3007 Not tainted syzkaller #0 [ 334.770284][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.780341][T13540] Call Trace: [ 334.783610][T13540] [ 334.786590][T13540] dump_stack_lvl+0x188/0x250 [ 334.791263][T13540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.797405][T13540] ? show_regs_print_info+0x20/0x20 [ 334.802585][T13540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.808739][T13540] should_fail+0x38c/0x4c0 [ 334.813145][T13540] _copy_from_user+0x2e/0x170 [ 334.817803][T13540] iovec_from_user+0x142/0x370 [ 334.822553][T13540] __import_iovec+0x70/0x490 [ 334.827135][T13540] import_iovec+0x6f/0xa0 [ 334.831458][T13540] ___sys_sendmsg+0x1fd/0x2e0 [ 334.836228][T13540] ? __sys_sendmsg+0x2a0/0x2a0 [ 334.840999][T13540] __se_sys_sendmsg+0x1af/0x290 [ 334.845837][T13540] ? __x64_sys_sendmsg+0x80/0x80 [ 334.850764][T13540] ? syscall_enter_from_user_mode+0x2a/0x70 [ 334.856739][T13540] do_syscall_64+0x4c/0xa0 [ 334.861135][T13540] ? clear_bhb_loop+0x30/0x80 [ 334.865794][T13540] ? clear_bhb_loop+0x30/0x80 [ 334.870453][T13540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.876330][T13540] RIP: 0033:0x7f6501b11cb9 [ 334.880730][T13540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.900433][T13540] RSP: 002b:00007f64ffd6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.908921][T13540] RAX: ffffffffffffffda RBX: 00007f6501d8cfa0 RCX: 00007f6501b11cb9 [ 334.916964][T13540] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 334.924921][T13540] RBP: 00007f64ffd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 334.932881][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.940835][T13540] R13: 00007f6501d8d038 R14: 00007f6501d8cfa0 R15: 00007ffee362fa98 [ 334.948796][T13540] [ 335.039236][T13538] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 335.107263][T13553] IPv6: Can't replace route, no match found [ 335.123226][T13553] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.203455][T13427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.281013][T13427] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.291077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.319930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.359282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.373707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.398136][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.405367][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.464484][T13561] delete_channel: no stack [ 335.518800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.520704][T13558] delete_channel: no stack [ 335.540315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.570023][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.577106][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.621331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.659985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.742514][T13574] netlink: 'syz.0.3025': attribute type 39 has an invalid length. [ 335.850598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.863251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.889099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.923086][T13588] FAULT_INJECTION: forcing a failure. [ 335.923086][T13588] name failslab, interval 1, probability 0, space 0, times 0 [ 335.935389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.956512][T13588] CPU: 0 PID: 13588 Comm: syz.4.3022 Not tainted syzkaller #0 [ 335.964008][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.974065][T13588] Call Trace: [ 335.977342][T13588] [ 335.980274][T13588] dump_stack_lvl+0x188/0x250 [ 335.984961][T13588] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.991100][T13588] ? show_regs_print_info+0x20/0x20 [ 335.996401][T13588] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.002582][T13588] should_fail+0x38c/0x4c0 [ 336.007229][T13588] should_failslab+0x5/0x20 [ 336.011732][T13588] slab_pre_alloc_hook+0x51/0xc0 [ 336.016673][T13588] kmem_cache_alloc_node+0x47/0x2d0 [ 336.021950][T13588] ? __alloc_skb+0xf4/0x750 [ 336.026445][T13588] __alloc_skb+0xf4/0x750 [ 336.030764][T13588] netlink_sendmsg+0x654/0xbe0 [ 336.035557][T13588] ? netlink_getsockopt+0x570/0x570 [ 336.040919][T13588] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.046188][T13588] ? security_socket_sendmsg+0x7c/0xa0 [ 336.051633][T13588] ? netlink_getsockopt+0x570/0x570 [ 336.056820][T13588] ____sys_sendmsg+0x5b7/0x8f0 [ 336.061575][T13588] ? __sys_sendmsg_sock+0x30/0x30 [ 336.066677][T13588] ? import_iovec+0x6f/0xa0 [ 336.071166][T13588] ___sys_sendmsg+0x236/0x2e0 [ 336.076005][T13588] ? __sys_sendmsg+0x2a0/0x2a0 [ 336.080756][T13588] ? ktime_get_real_ts64+0x440/0x440 [ 336.086045][T13588] __se_sys_sendmsg+0x1af/0x290 [ 336.090878][T13588] ? __x64_sys_sendmsg+0x80/0x80 [ 336.095812][T13588] ? syscall_enter_from_user_mode+0x2a/0x70 [ 336.101700][T13588] do_syscall_64+0x4c/0xa0 [ 336.106099][T13588] ? clear_bhb_loop+0x30/0x80 [ 336.110758][T13588] ? clear_bhb_loop+0x30/0x80 [ 336.115424][T13588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.121304][T13588] RIP: 0033:0x7fdfe8208cb9 [ 336.125708][T13588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.145302][T13588] RSP: 002b:00007fdfe6464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.153703][T13588] RAX: ffffffffffffffda RBX: 00007fdfe8483fa0 RCX: 00007fdfe8208cb9 [ 336.161663][T13588] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 336.169630][T13588] RBP: 00007fdfe6464090 R08: 0000000000000000 R09: 0000000000000000 [ 336.177697][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.185649][T13588] R13: 00007fdfe8484038 R14: 00007fdfe8483fa0 R15: 00007ffcb3b5c6f8 [ 336.193617][T13588] [ 336.198508][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 336.244463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.292180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.343434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.388048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.411593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.468886][T13427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.490488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.868382][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.906995][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.951639][T13427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.065578][T13629] __nla_validate_parse: 2 callbacks suppressed [ 337.065594][T13629] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3035'. [ 337.098125][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.190260][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.363054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.383349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.432903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.452729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.469880][T13427] device veth0_vlan entered promiscuous mode [ 337.516650][T13427] device veth1_vlan entered promiscuous mode [ 337.547558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.556849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.590026][T13427] device veth0_macvtap entered promiscuous mode [ 337.635015][T13427] device veth1_macvtap entered promiscuous mode [ 337.644449][T13644] netlink: 'syz.1.3039': attribute type 10 has an invalid length. [ 337.665583][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.674077][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.728381][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.735795][T13644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.743957][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.751314][T13644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.788345][T13644] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.867897][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.890902][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.925720][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.955448][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.971818][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.990310][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.015000][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.035010][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.054424][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.067906][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.091632][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.109559][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.122331][T13427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.132755][T13652] bridge0: port 3(team0) entered blocking state [ 338.140300][T13652] bridge0: port 3(team0) entered disabled state [ 338.149998][T13652] device team0 entered promiscuous mode [ 338.155627][T13652] device team_slave_0 entered promiscuous mode [ 338.163930][T13652] device team_slave_1 entered promiscuous mode [ 338.180128][T13652] bridge0: port 3(team0) entered blocking state [ 338.186504][T13652] bridge0: port 3(team0) entered forwarding state [ 338.216604][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.258255][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.304934][ T6370] Bluetooth: hci1: command 0x040f tx timeout [ 338.313745][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.349278][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.404040][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.433393][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.457157][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.476614][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.488256][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.507032][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.518367][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.543945][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.563808][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.582248][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.611012][T13427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.639957][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.672521][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.733194][T13427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.769130][T13427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.777870][T13427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.825365][T13427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.864684][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 338.903948][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 338.955702][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.000732][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.116470][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.149035][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.169258][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.197689][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.199867][T13692] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3053'. [ 339.269595][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.305688][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.348065][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.366624][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.385123][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.406261][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.429107][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.449176][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3052'. [ 339.480939][T13679] netlink: 'syz.0.3052': attribute type 11 has an invalid length. [ 339.697626][ T4718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.719538][ T4718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.773465][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.809496][ T4718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.827207][ T4718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.862014][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.369639][ T6370] Bluetooth: hci1: command 0x0419 tx timeout [ 340.704305][T13758] sctp: [Deprecated]: syz.3.3071 (pid 13758) Use of int in maxseg socket option. [ 340.704305][T13758] Use struct sctp_assoc_value instead [ 341.826630][T13824] device syzkaller0 entered promiscuous mode [ 341.914502][T13828] device syzkaller0 entered promiscuous mode [ 342.304391][T13832] __nla_validate_parse: 56 callbacks suppressed [ 342.304407][T13832] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.3094'. [ 342.485888][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3098'. [ 342.695330][T13849] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3101'. [ 342.709524][T13849] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3101'. [ 342.786121][T13853] FAULT_INJECTION: forcing a failure. [ 342.786121][T13853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.804217][T13856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3104'. [ 342.826403][T13853] CPU: 1 PID: 13853 Comm: syz.1.3103 Not tainted syzkaller #0 [ 342.833897][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.843960][T13853] Call Trace: [ 342.847243][T13853] [ 342.850188][T13853] dump_stack_lvl+0x188/0x250 [ 342.854877][T13853] ? show_regs_print_info+0x20/0x20 [ 342.860072][T13853] ? load_image+0x400/0x400 [ 342.864574][T13853] ? __lock_acquire+0x7d10/0x7d10 [ 342.869599][T13853] should_fail+0x38c/0x4c0 [ 342.874115][T13853] _copy_from_iter+0x22e/0x1170 [ 342.878963][T13853] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 342.885122][T13853] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 342.890497][T13853] ? __phys_addr_symbol+0x2b/0x70 [ 342.895507][T13853] ? __check_object_size+0x30c/0x410 [ 342.900775][T13853] netlink_sendmsg+0x758/0xbe0 [ 342.905527][T13853] ? netlink_getsockopt+0x570/0x570 [ 342.910705][T13853] ? aa_sock_msg_perm+0x94/0x150 [ 342.915627][T13853] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 342.920897][T13853] ? security_socket_sendmsg+0x7c/0xa0 [ 342.926343][T13853] ? netlink_getsockopt+0x570/0x570 [ 342.931520][T13853] ____sys_sendmsg+0x5b7/0x8f0 [ 342.936271][T13853] ? __sys_sendmsg_sock+0x30/0x30 [ 342.941291][T13853] ? import_iovec+0x6f/0xa0 [ 342.945779][T13853] ___sys_sendmsg+0x236/0x2e0 [ 342.950440][T13853] ? __sys_sendmsg+0x2a0/0x2a0 [ 342.955207][T13853] __se_sys_sendmsg+0x1af/0x290 [ 342.960040][T13853] ? __x64_sys_sendmsg+0x80/0x80 [ 342.964968][T13853] ? syscall_enter_from_user_mode+0x2a/0x70 [ 342.970847][T13853] do_syscall_64+0x4c/0xa0 [ 342.975245][T13853] ? clear_bhb_loop+0x30/0x80 [ 342.979998][T13853] ? clear_bhb_loop+0x30/0x80 [ 342.984657][T13853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.990531][T13853] RIP: 0033:0x7f2d268e6cb9 [ 342.994930][T13853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.014893][T13853] RSP: 002b:00007f2d24b42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.023291][T13853] RAX: ffffffffffffffda RBX: 00007f2d26b61fa0 RCX: 00007f2d268e6cb9 [ 343.031248][T13853] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 343.039203][T13853] RBP: 00007f2d24b42090 R08: 0000000000000000 R09: 0000000000000000 [ 343.047153][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.055106][T13853] R13: 00007f2d26b62038 R14: 00007f2d26b61fa0 R15: 00007ffdb3153568 [ 343.063069][T13853] [ 343.328978][T13866] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3105'. [ 343.353471][T13860] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3105'. [ 343.604606][T13880] validate_nla: 55 callbacks suppressed [ 343.604622][T13880] netlink: 'syz.3.3112': attribute type 27 has an invalid length. [ 343.622425][T13879] device syzkaller0 entered promiscuous mode [ 343.631484][T13884] netlink: 'syz.1.3113': attribute type 21 has an invalid length. [ 343.649349][T13880] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3112'. [ 343.659084][T13884] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.3113'. [ 343.969454][T13894] FAULT_INJECTION: forcing a failure. [ 343.969454][T13894] name failslab, interval 1, probability 0, space 0, times 0 [ 343.993815][T13894] CPU: 1 PID: 13894 Comm: syz.3.3117 Not tainted syzkaller #0 [ 344.001320][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.011380][T13894] Call Trace: [ 344.014667][T13894] [ 344.017608][T13894] dump_stack_lvl+0x188/0x250 [ 344.022288][T13894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.022322][T13894] ? show_regs_print_info+0x20/0x20 [ 344.033634][T13894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.039805][T13894] should_fail+0x38c/0x4c0 [ 344.044229][T13894] should_failslab+0x5/0x20 [ 344.048732][T13894] slab_pre_alloc_hook+0x51/0xc0 [ 344.053668][T13894] ? skb_clone+0x1bd/0x350 [ 344.058087][T13894] kmem_cache_alloc+0x3d/0x290 [ 344.062866][T13894] skb_clone+0x1bd/0x350 [ 344.067110][T13894] __netlink_deliver_tap+0x3cd/0x7c0 [ 344.072413][T13894] netlink_deliver_tap+0x16c/0x180 [ 344.077536][T13894] netlink_unicast+0x74f/0x920 [ 344.082322][T13894] netlink_sendmsg+0x8ba/0xbe0 [ 344.087103][T13894] ? netlink_getsockopt+0x570/0x570 [ 344.092320][T13894] ? aa_sock_msg_perm+0x94/0x150 [ 344.097280][T13894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.102583][T13894] ? security_socket_sendmsg+0x7c/0xa0 [ 344.108053][T13894] ? netlink_getsockopt+0x570/0x570 [ 344.113257][T13894] ____sys_sendmsg+0x5b7/0x8f0 [ 344.118048][T13894] ? __sys_sendmsg_sock+0x30/0x30 [ 344.123097][T13894] ? import_iovec+0x6f/0xa0 [ 344.127721][T13894] ___sys_sendmsg+0x236/0x2e0 [ 344.132427][T13894] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.137223][T13894] ? ktime_get_real_ts64+0x440/0x440 [ 344.142535][T13894] __se_sys_sendmsg+0x1af/0x290 [ 344.147400][T13894] ? __x64_sys_sendmsg+0x80/0x80 [ 344.152348][T13894] ? lockdep_hardirqs_on+0x94/0x140 [ 344.157574][T13894] do_syscall_64+0x4c/0xa0 [ 344.162000][T13894] ? clear_bhb_loop+0x30/0x80 [ 344.166687][T13894] ? clear_bhb_loop+0x30/0x80 [ 344.171377][T13894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.177278][T13894] RIP: 0033:0x7f1c574f1cb9 [ 344.181723][T13894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.201336][T13894] RSP: 002b:00007f1c5574d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.209760][T13894] RAX: ffffffffffffffda RBX: 00007f1c5776cfa0 RCX: 00007f1c574f1cb9 [ 344.217753][T13894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 344.225737][T13894] RBP: 00007f1c5574d090 R08: 0000000000000000 R09: 0000000000000000 [ 344.233723][T13894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.241724][T13894] R13: 00007f1c5776d038 R14: 00007f1c5776cfa0 R15: 00007ffd60134078 [ 344.249746][T13894] [ 344.468862][T13895] chnl_net:caif_netlink_parms(): no params data found [ 344.786228][T13895] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.828140][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.890553][T13895] device bridge_slave_0 entered promiscuous mode [ 344.964001][T13895] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.006092][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.058212][T13895] device bridge_slave_1 entered promiscuous mode [ 345.157002][T13935] device syzkaller0 entered promiscuous mode [ 345.240373][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.539699][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.557350][T13939] device syzkaller0 entered promiscuous mode [ 345.646831][T13895] team0: Port device team_slave_0 added [ 345.668056][T13895] team0: Port device team_slave_1 added [ 345.701304][T13945] FAULT_INJECTION: forcing a failure. [ 345.701304][T13945] name failslab, interval 1, probability 0, space 0, times 0 [ 345.702180][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.729325][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.754955][T13945] CPU: 1 PID: 13945 Comm: syz.4.3133 Not tainted syzkaller #0 [ 345.762687][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.763636][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.772882][T13945] Call Trace: [ 345.772898][T13945] [ 345.772906][T13945] dump_stack_lvl+0x188/0x250 [ 345.772932][T13945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.772949][T13945] ? show_regs_print_info+0x20/0x20 [ 345.772966][T13945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.772992][T13945] should_fail+0x38c/0x4c0 [ 345.816384][T13945] should_failslab+0x5/0x20 [ 345.820900][T13945] slab_pre_alloc_hook+0x51/0xc0 [ 345.825850][T13945] kmem_cache_alloc_node+0x47/0x2d0 [ 345.831523][T13945] ? __alloc_skb+0xf4/0x750 [ 345.836046][T13945] __alloc_skb+0xf4/0x750 [ 345.840391][T13945] netlink_ack+0x372/0xb50 [ 345.844828][T13945] ? __copy_skb_header+0x3ba/0x4f0 [ 345.849950][T13945] ? netlink_dump+0xcf0/0xcf0 [ 345.854628][T13945] ? __skb_clone+0x480/0x790 [ 345.859225][T13945] netlink_rcv_skb+0x27a/0x440 [ 345.864097][T13945] ? rtnetlink_bind+0x80/0x80 [ 345.869056][T13945] ? netlink_ack+0xb50/0xb50 [ 345.873703][T13945] netlink_unicast+0x774/0x920 [ 345.878481][T13945] netlink_sendmsg+0x8ba/0xbe0 [ 345.883248][T13945] ? lockdep_hardirqs_on+0x94/0x140 [ 345.888456][T13945] ? netlink_getsockopt+0x570/0x570 [ 345.893672][T13945] ? bpf_lsm_socket_accept+0x10/0x10 [ 345.898964][T13945] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 345.904253][T13945] ? security_socket_sendmsg+0x7c/0xa0 [ 345.909719][T13945] ? netlink_getsockopt+0x570/0x570 [ 345.914921][T13945] ____sys_sendmsg+0x5b7/0x8f0 [ 345.919703][T13945] ? __sys_sendmsg_sock+0x30/0x30 [ 345.924740][T13945] ? import_iovec+0x6f/0xa0 [ 345.929342][T13945] ___sys_sendmsg+0x236/0x2e0 [ 345.934041][T13945] ? __sys_sendmsg+0x2a0/0x2a0 [ 345.938843][T13945] ? ktime_get_real_ts64+0x440/0x440 [ 345.944155][T13945] __se_sys_sendmsg+0x1af/0x290 [ 345.949016][T13945] ? __x64_sys_sendmsg+0x80/0x80 [ 345.953955][T13945] ? lockdep_hardirqs_on+0x94/0x140 [ 345.959176][T13945] do_syscall_64+0x4c/0xa0 [ 345.963599][T13945] ? clear_bhb_loop+0x30/0x80 [ 345.968281][T13945] ? clear_bhb_loop+0x30/0x80 [ 345.972961][T13945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.978943][T13945] RIP: 0033:0x7fdfe8208cb9 [ 345.983362][T13945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.002972][T13945] RSP: 002b:00007fdfe6464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.011396][T13945] RAX: ffffffffffffffda RBX: 00007fdfe8483fa0 RCX: 00007fdfe8208cb9 [ 346.019379][T13945] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 346.027535][T13945] RBP: 00007fdfe6464090 R08: 0000000000000000 R09: 0000000000000000 [ 346.035512][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.043482][T13945] R13: 00007fdfe8484038 R14: 00007fdfe8483fa0 R15: 00007ffcb3b5c6f8 [ 346.051459][T13945] [ 346.139296][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.147202][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.212557][ T4228] Bluetooth: hci3: command 0x0409 tx timeout [ 346.258881][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.348140][T13895] device hsr_slave_0 entered promiscuous mode [ 346.355891][T13895] device hsr_slave_1 entered promiscuous mode [ 346.364524][T13895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.374933][T13895] Cannot create hsr debugfs directory [ 346.547491][T13958] netlink: 'syz.4.3138': attribute type 9 has an invalid length. [ 346.568838][T13958] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3138'. [ 346.658805][T13960] netlink: 'syz.4.3138': attribute type 9 has an invalid length. [ 346.692117][T13895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.755030][T13962] netlink: 'syz.4.3139': attribute type 10 has an invalid length. [ 346.774218][T13962] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 346.781755][T13962] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.809491][T13962] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 346.866340][T13895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.890618][T13961] delete_channel: no stack [ 346.985469][T13895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.076588][T13895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.341330][T13973] FAULT_INJECTION: forcing a failure. [ 347.341330][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 347.362896][T13895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.370526][T13973] CPU: 0 PID: 13973 Comm: syz.1.3144 Not tainted syzkaller #0 [ 347.378019][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.388097][T13973] Call Trace: [ 347.391399][T13973] [ 347.394344][T13973] dump_stack_lvl+0x188/0x250 [ 347.399055][T13973] ? show_regs_print_info+0x20/0x20 [ 347.404279][T13973] ? load_image+0x400/0x400 [ 347.408823][T13973] ? __might_sleep+0xf0/0xf0 [ 347.413444][T13973] ? __lock_acquire+0x7d10/0x7d10 [ 347.418498][T13973] should_fail+0x38c/0x4c0 [ 347.422950][T13973] should_failslab+0x5/0x20 [ 347.427469][T13973] slab_pre_alloc_hook+0x51/0xc0 [ 347.432433][T13973] __kmalloc_node_track_caller+0x68/0x3a0 [ 347.438170][T13973] ? netlink_ack+0x372/0xb50 [ 347.442772][T13973] ? kmem_cache_alloc_node+0x162/0x2d0 [ 347.448332][T13973] ? __alloc_skb+0xf4/0x750 [ 347.452855][T13973] ? netlink_ack+0x372/0xb50 [ 347.457475][T13973] __alloc_skb+0x22c/0x750 [ 347.461911][T13973] ? lock_chain_count+0x20/0x20 [ 347.466793][T13973] netlink_ack+0x372/0xb50 [ 347.471248][T13973] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 347.477427][T13973] ? netlink_dump+0xcf0/0xcf0 [ 347.482147][T13973] netlink_rcv_skb+0x27a/0x440 [ 347.487022][T13973] ? rtnetlink_bind+0x80/0x80 [ 347.491728][T13973] ? netlink_ack+0xb50/0xb50 [ 347.496399][T13973] netlink_unicast+0x774/0x920 [ 347.501214][T13973] netlink_sendmsg+0x8ba/0xbe0 [ 347.506025][T13973] ? netlink_getsockopt+0x570/0x570 [ 347.511253][T13973] ? aa_sock_msg_perm+0x94/0x150 [ 347.516220][T13973] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 347.521518][T13973] ? security_socket_sendmsg+0x7c/0xa0 [ 347.527000][T13973] ? netlink_getsockopt+0x570/0x570 [ 347.532216][T13973] ____sys_sendmsg+0x5b7/0x8f0 [ 347.537029][T13973] ? __sys_sendmsg_sock+0x30/0x30 [ 347.542101][T13973] ? import_iovec+0x6f/0xa0 [ 347.546664][T13973] ___sys_sendmsg+0x236/0x2e0 [ 347.551537][T13973] ? __sys_sendmsg+0x2a0/0x2a0 [ 347.556362][T13973] ? trace_event_raw_event_lock+0x270/0x270 [ 347.562280][T13973] ? vfs_write+0x8b2/0xd60 [ 347.566795][T13973] __se_sys_sendmsg+0x1af/0x290 [ 347.571793][T13973] ? __x64_sys_sendmsg+0x80/0x80 [ 347.576819][T13973] ? syscall_enter_from_user_mode+0x2a/0x70 [ 347.582755][T13973] do_syscall_64+0x4c/0xa0 [ 347.587285][T13973] ? clear_bhb_loop+0x30/0x80 [ 347.591978][T13973] ? clear_bhb_loop+0x30/0x80 [ 347.596680][T13973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.602594][T13973] RIP: 0033:0x7f2d268e6cb9 [ 347.607038][T13973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.626857][T13973] RSP: 002b:00007f2d24b42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.635302][T13973] RAX: ffffffffffffffda RBX: 00007f2d26b61fa0 RCX: 00007f2d268e6cb9 [ 347.643298][T13973] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 347.651292][T13973] RBP: 00007f2d24b42090 R08: 0000000000000000 R09: 0000000000000000 [ 347.659278][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.667259][T13973] R13: 00007f2d26b62038 R14: 00007f2d26b61fa0 R15: 00007ffdb3153568 [ 347.675300][T13973] [ 347.706914][T13895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.718407][T13895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.729810][T13895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.007984][T13895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.030323][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.043090][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.092734][T13895] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.115368][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.146996][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.190418][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.197563][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.246289][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.282381][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.291696][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 348.302739][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.329805][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.336898][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.366252][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.403770][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.419760][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.430039][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.439426][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.461470][T14006] netlink: 'syz.1.3151': attribute type 13 has an invalid length. [ 348.490579][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.500974][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.515023][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.567353][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.604631][T13895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.652993][T13895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.672173][T14010] FAULT_INJECTION: forcing a failure. [ 348.672173][T14010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.691255][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.714229][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.723442][T14010] CPU: 0 PID: 14010 Comm: syz.4.3154 Not tainted syzkaller #0 [ 348.730920][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.740988][T14010] Call Trace: [ 348.744274][T14010] [ 348.747204][T14010] dump_stack_lvl+0x188/0x250 [ 348.751887][T14010] ? show_regs_print_info+0x20/0x20 [ 348.757193][T14010] ? load_image+0x400/0x400 [ 348.761700][T14010] ? stack_trace_save+0xa6/0xf0 [ 348.766556][T14010] ? preempt_schedule_irq+0xe6/0x160 [ 348.771849][T14010] ? verify_lock_unused+0x140/0x140 [ 348.777055][T14010] should_fail+0x38c/0x4c0 [ 348.781490][T14010] prepare_alloc_pages+0x1e4/0x5f0 [ 348.786620][T14010] __alloc_pages+0x11b/0x480 [ 348.791213][T14010] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.797373][T14010] ? zone_statistics+0x170/0x170 [ 348.802320][T14010] ? alloc_pages+0x438/0x550 [ 348.806901][T14010] new_slab+0xc0/0x4b0 [ 348.810959][T14010] ___slab_alloc+0x80a/0xdd0 [ 348.815537][T14010] ? netlink_ack+0x372/0xb50 [ 348.820121][T14010] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 348.825911][T14010] ? netlink_ack+0x372/0xb50 [ 348.830481][T14010] ? netlink_ack+0x372/0xb50 [ 348.835051][T14010] __alloc_skb+0x22c/0x750 [ 348.839453][T14010] netlink_ack+0x372/0xb50 [ 348.843872][T14010] ? __copy_skb_header+0x3ba/0x4f0 [ 348.848972][T14010] ? netlink_dump+0xcf0/0xcf0 [ 348.853632][T14010] ? __skb_clone+0x480/0x790 [ 348.858205][T14010] netlink_rcv_skb+0x27a/0x440 [ 348.862953][T14010] ? rtnetlink_bind+0x80/0x80 [ 348.867630][T14010] ? netlink_ack+0xb50/0xb50 [ 348.872212][T14010] netlink_unicast+0x774/0x920 [ 348.876972][T14010] netlink_sendmsg+0x8ba/0xbe0 [ 348.881716][T14010] ? lockdep_hardirqs_on+0x94/0x140 [ 348.886902][T14010] ? netlink_getsockopt+0x570/0x570 [ 348.892083][T14010] ? bpf_lsm_socket_accept+0x10/0x10 [ 348.897351][T14010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 348.902620][T14010] ? security_socket_sendmsg+0x7c/0xa0 [ 348.908062][T14010] ? netlink_getsockopt+0x570/0x570 [ 348.913240][T14010] ____sys_sendmsg+0x5b7/0x8f0 [ 348.917994][T14010] ? __sys_sendmsg_sock+0x30/0x30 [ 348.923006][T14010] ? import_iovec+0x6f/0xa0 [ 348.927495][T14010] ___sys_sendmsg+0x236/0x2e0 [ 348.932159][T14010] ? __sys_sendmsg+0x2a0/0x2a0 [ 348.936911][T14010] ? ktime_get_real_ts64+0x440/0x440 [ 348.942192][T14010] __se_sys_sendmsg+0x1af/0x290 [ 348.947029][T14010] ? __x64_sys_sendmsg+0x80/0x80 [ 348.951954][T14010] ? syscall_enter_from_user_mode+0x2a/0x70 [ 348.957869][T14010] do_syscall_64+0x4c/0xa0 [ 348.962268][T14010] ? clear_bhb_loop+0x30/0x80 [ 348.967040][T14010] ? clear_bhb_loop+0x30/0x80 [ 348.971705][T14010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.977585][T14010] RIP: 0033:0x7fdfe8208cb9 [ 348.981983][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.001658][T14010] RSP: 002b:00007fdfe6464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.010142][T14010] RAX: ffffffffffffffda RBX: 00007fdfe8483fa0 RCX: 00007fdfe8208cb9 [ 349.018182][T14010] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 349.026233][T14010] RBP: 00007fdfe6464090 R08: 0000000000000000 R09: 0000000000000000 [ 349.034187][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.042145][T14010] R13: 00007fdfe8484038 R14: 00007fdfe8483fa0 R15: 00007ffcb3b5c6f8 [ 349.050107][T14010] [ 349.085063][T14012] device syzkaller0 entered promiscuous mode [ 349.321412][T14019] __nla_validate_parse: 2 callbacks suppressed [ 349.321437][T14019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3156'. [ 349.351592][T14021] netlink: 'syz.1.3156': attribute type 39 has an invalid length. [ 349.366692][T14022] netlink: 'syz.1.3156': attribute type 10 has an invalid length. [ 349.377725][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.430485][T14022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.472187][T14022] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 349.694680][T14035] device syzkaller0 entered promiscuous mode [ 349.742896][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.759280][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.826307][T13895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.932395][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.942967][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.965805][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.975006][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.985759][T13895] device veth0_vlan entered promiscuous mode [ 350.000657][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.009717][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.020254][T13895] device veth1_vlan entered promiscuous mode [ 350.080010][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.091439][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.104992][T13895] device veth0_macvtap entered promiscuous mode [ 350.115667][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.134135][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.157968][T13895] device veth1_macvtap entered promiscuous mode [ 350.170965][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.185608][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.263906][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.283755][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.326118][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.346578][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.367745][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.380003][ T5883] Bluetooth: hci3: command 0x040f tx timeout [ 350.386261][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.397574][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.411990][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.429072][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.448757][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.463155][T13895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.486914][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.506414][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.567442][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.579815][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.596665][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.616282][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.626880][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.645861][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.656257][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.676359][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.687614][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.705943][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.716018][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.726797][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.736833][T13895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.747439][T13895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.759290][T13895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.773401][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.783362][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.797263][T13895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.807726][T13895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.816645][T13895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.825617][T13895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.931853][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.966536][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.966594][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.976834][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.017684][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.063835][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.216532][T14072] FAULT_INJECTION: forcing a failure. [ 351.216532][T14072] name failslab, interval 1, probability 0, space 0, times 0 [ 351.279564][T14072] CPU: 1 PID: 14072 Comm: syz.1.3169 Not tainted syzkaller #0 [ 351.287065][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.297123][T14072] Call Trace: [ 351.300404][T14072] [ 351.303335][T14072] dump_stack_lvl+0x188/0x250 [ 351.308015][T14072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 351.314176][T14072] ? show_regs_print_info+0x20/0x20 [ 351.319376][T14072] ? load_image+0x400/0x400 [ 351.323889][T14072] ? should_fail+0x311/0x4c0 [ 351.328569][T14072] should_fail+0x38c/0x4c0 [ 351.332985][T14072] should_failslab+0x5/0x20 [ 351.337486][T14072] slab_pre_alloc_hook+0x51/0xc0 [ 351.342424][T14072] ? skb_clone+0x1bd/0x350 [ 351.346837][T14072] kmem_cache_alloc+0x3d/0x290 [ 351.351600][T14072] skb_clone+0x1bd/0x350 [ 351.355850][T14072] __netlink_deliver_tap+0x3cd/0x7c0 [ 351.361144][T14072] ? rcu_is_watching+0x56/0xa0 [ 351.365912][T14072] netlink_deliver_tap+0x16c/0x180 [ 351.371030][T14072] netlink_sendskb+0x64/0x130 [ 351.375719][T14072] netlink_ack+0x87d/0xb50 [ 351.380146][T14072] ? netlink_dump+0xcf0/0xcf0 [ 351.384815][T14072] ? rcu_read_unlock_special+0xf0/0x4a0 [ 351.390368][T14072] ? lockdep_hardirqs_off+0x70/0x100 [ 351.395666][T14072] netlink_rcv_skb+0x27a/0x440 [ 351.400425][T14072] ? rtnetlink_bind+0x80/0x80 [ 351.405103][T14072] ? netlink_ack+0xb50/0xb50 [ 351.409704][T14072] netlink_unicast+0x774/0x920 [ 351.414650][T14072] netlink_sendmsg+0x8ba/0xbe0 [ 351.419421][T14072] ? netlink_getsockopt+0x570/0x570 [ 351.424616][T14072] ? aa_sock_msg_perm+0x94/0x150 [ 351.429555][T14072] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 351.434838][T14072] ? security_socket_sendmsg+0x7c/0xa0 [ 351.440292][T14072] ? netlink_getsockopt+0x570/0x570 [ 351.445492][T14072] ____sys_sendmsg+0x5b7/0x8f0 [ 351.450267][T14072] ? __sys_sendmsg_sock+0x30/0x30 [ 351.455301][T14072] ? import_iovec+0x6f/0xa0 [ 351.459806][T14072] ___sys_sendmsg+0x236/0x2e0 [ 351.464491][T14072] ? __sys_sendmsg+0x2a0/0x2a0 [ 351.469272][T14072] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 351.475885][T14072] __se_sys_sendmsg+0x1af/0x290 [ 351.480740][T14072] ? __x64_sys_sendmsg+0x80/0x80 [ 351.485698][T14072] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 351.491745][T14072] ? lockdep_hardirqs_on+0x94/0x140 [ 351.496946][T14072] do_syscall_64+0x4c/0xa0 [ 351.501355][T14072] ? clear_bhb_loop+0x30/0x80 [ 351.506027][T14072] ? clear_bhb_loop+0x30/0x80 [ 351.510714][T14072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.516618][T14072] RIP: 0033:0x7f2d268e6cb9 [ 351.521049][T14072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.540687][T14072] RSP: 002b:00007f2d24b42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.549111][T14072] RAX: ffffffffffffffda RBX: 00007f2d26b61fa0 RCX: 00007f2d268e6cb9 [ 351.557083][T14072] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 351.565050][T14072] RBP: 00007f2d24b42090 R08: 0000000000000000 R09: 0000000000000000 [ 351.573018][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.581253][T14072] R13: 00007f2d26b62038 R14: 00007f2d26b61fa0 R15: 00007ffdb3153568 [ 351.589345][T14072] [ 352.462972][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 352.678962][T14069] delete_channel: no stack [ 352.714143][T14110] netlink: 'syz.4.3179': attribute type 9 has an invalid length. [ 352.722382][T14110] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3179'. [ 352.817376][T14115] device syzkaller0 entered promiscuous mode [ 353.029399][T14122] netlink: 'syz.2.3182': attribute type 27 has an invalid length. [ 353.048519][T14112] netlink: 'syz.4.3179': attribute type 9 has an invalid length. [ 353.075576][T14122] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3182'. [ 353.112699][T14117] netlink: 'syz.4.3179': attribute type 10 has an invalid length. [ 353.126951][T14112] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3179'. [ 353.152465][T14117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3179'. [ 353.189056][T14117] device dummy0 entered promiscuous mode [ 353.214017][T14117] bridge0: port 3(dummy0) entered blocking state [ 353.232509][T14117] bridge0: port 3(dummy0) entered disabled state [ 353.281659][T14117] bridge0: port 3(dummy0) entered blocking state [ 353.288118][T14117] bridge0: port 3(dummy0) entered forwarding state [ 353.476998][T14131] FAULT_INJECTION: forcing a failure. [ 353.476998][T14131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.529417][T14131] CPU: 1 PID: 14131 Comm: syz.3.3184 Not tainted syzkaller #0 [ 353.536930][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.547137][T14131] Call Trace: [ 353.550431][T14131] [ 353.553482][T14131] dump_stack_lvl+0x188/0x250 [ 353.558167][T14131] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.564445][T14131] ? show_regs_print_info+0x20/0x20 [ 353.569644][T14131] ? load_image+0x400/0x400 [ 353.574153][T14131] should_fail+0x38c/0x4c0 [ 353.578570][T14131] _copy_from_user+0x2e/0x170 [ 353.583247][T14131] kstrtouint_from_user+0xd3/0x220 [ 353.588355][T14131] ? kstrtol_from_user+0x2a0/0x2a0 [ 353.593480][T14131] proc_fail_nth_write+0x8b/0x200 [ 353.598494][T14131] ? proc_fail_nth_read+0x220/0x220 [ 353.603675][T14131] ? rcu_read_lock_any_held+0x1/0x130 [ 353.609033][T14131] ? proc_fail_nth_read+0x220/0x220 [ 353.614216][T14131] vfs_write+0x30b/0xd60 [ 353.618444][T14131] ? file_end_write+0x250/0x250 [ 353.623272][T14131] ? rcu_nmi_exit+0x6f/0xf0 [ 353.627761][T14131] ? __fget_files+0x40f/0x480 [ 353.632425][T14131] ? mutex_lock_nested+0x17/0x20 [ 353.637347][T14131] ? __fdget_pos+0x2bf/0x370 [ 353.641919][T14131] ? ksys_write+0x71/0x260 [ 353.646336][T14131] ksys_write+0x152/0x260 [ 353.650653][T14131] ? __ia32_sys_read+0x80/0x80 [ 353.655401][T14131] ? syscall_enter_from_user_mode+0x2a/0x70 [ 353.661281][T14131] do_syscall_64+0x4c/0xa0 [ 353.665678][T14131] ? clear_bhb_loop+0x30/0x80 [ 353.670336][T14131] ? clear_bhb_loop+0x30/0x80 [ 353.674996][T14131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.680876][T14131] RIP: 0033:0x7f1c574b258e [ 353.685295][T14131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 353.705178][T14131] RSP: 002b:00007f1c5574cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.713591][T14131] RAX: ffffffffffffffda RBX: 00007f1c5574d6c0 RCX: 00007f1c574b258e [ 353.721546][T14131] RDX: 0000000000000001 RSI: 00007f1c5574d0a0 RDI: 0000000000000006 [ 353.729501][T14131] RBP: 00007f1c5574d090 R08: 0000000000000000 R09: 0000000000000000 [ 353.737454][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.745405][T14131] R13: 00007f1c5776d038 R14: 00007f1c5776cfa0 R15: 00007ffd60134078 [ 353.753375][T14131] [ 354.605781][T14164] netlink: 'syz.3.3196': attribute type 9 has an invalid length. [ 354.629005][T14164] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3196'. [ 354.882464][T14172] netlink: 'syz.2.3197': attribute type 2 has an invalid length. [ 354.929142][T14172] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 354.976600][T14167] netlink: 'syz.3.3196': attribute type 9 has an invalid length. [ 354.989017][T14167] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3196'. [ 355.002315][T14172] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3197'. [ 355.028965][T14168] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3197'. [ 355.090854][T14171] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 355.118073][T14171] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3198'. [ 355.242506][T14182] netlink: 'syz.3.3200': attribute type 1 has an invalid length. [ 355.278706][T14182] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3200'. [ 355.304333][T14182] device syzkaller0 entered promiscuous mode [ 355.356142][T14182] netlink: 'syz.3.3200': attribute type 2 has an invalid length. [ 355.398444][T14182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3200'. [ 355.863263][T14212] netlink: 'syz.1.3210': attribute type 17 has an invalid length. [ 356.268850][T14234] netlink: 'syz.4.3219': attribute type 20 has an invalid length. [ 356.334785][T14237] tap0: tun_chr_ioctl cmd 1074025677 [ 356.349051][T14237] tap0: linktype set to 774 [ 356.387281][T14235] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3219'. [ 357.650436][T14288] device pim6reg1 entered promiscuous mode [ 358.245910][T14325] device syzkaller0 entered promiscuous mode [ 359.492780][T14369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3269'. [ 359.641848][T14371] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3271'. [ 360.625631][T14415] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.909011][T14439] netlink: 'syz.0.3295': attribute type 3 has an invalid length. [ 360.971612][T14439] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3295'. [ 361.262392][T14433] device syzkaller0 entered promiscuous mode [ 361.973358][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.995654][T14439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.061205][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.099072][T14439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.807817][T14480] netlink: 'syz.1.3311': attribute type 9 has an invalid length. [ 362.848953][T14480] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3311'. [ 363.158859][T14488] netlink: 'syz.1.3311': attribute type 9 has an invalid length. [ 363.169786][T14488] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3311'. [ 363.253418][T14499] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3317'. [ 363.658119][T14508] device syzkaller0 entered promiscuous mode [ 364.470362][T14536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3328'. [ 365.385831][T14557] netlink: 'syz.4.3336': attribute type 21 has an invalid length. [ 365.396634][T14557] netlink: 'syz.4.3336': attribute type 6 has an invalid length. [ 365.423760][T14557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3336'. [ 366.283219][T14578] netlink: 'syz.0.3345': attribute type 10 has an invalid length. [ 366.390549][T14578] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3345'. [ 366.403540][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.412084][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.693086][T14593] device syzkaller0 entered promiscuous mode [ 367.413828][T14616] netlink: 'syz.4.3361': attribute type 15 has an invalid length. [ 367.427402][T14616] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.3361'. [ 367.744314][T14643] netlink: 'syz.0.3368': attribute type 10 has an invalid length. [ 367.794314][T14643] team0: Port device geneve1 added [ 368.773536][T14676] netlink: 'syz.3.3384': attribute type 21 has an invalid length. [ 368.808696][T14676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3384'. [ 368.818118][T14679] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3385'. [ 368.886987][T14679] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 369.365848][T14697] device syzkaller0 entered promiscuous mode [ 371.551323][T14782] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3419'. [ 371.901322][T14802] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3429'. [ 372.017287][T14800] device syzkaller0 entered promiscuous mode [ 372.728977][T14827] netlink: 'syz.3.3437': attribute type 10 has an invalid length. [ 372.781909][T14827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.805664][T14827] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 372.827345][T14834] netlink: 'syz.4.3438': attribute type 4 has an invalid length. [ 372.836899][T14834] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3438'. [ 373.031326][T14839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3439'. [ 373.091683][T14844] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3440'. [ 373.567543][T14862] netlink: 'syz.3.3448': attribute type 46 has an invalid length. [ 373.664970][T14866] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3449'. [ 373.717002][T14866] netlink: 'syz.0.3449': attribute type 13 has an invalid length. [ 373.728424][T14866] device macvtap0 entered promiscuous mode [ 373.779714][T14866] macvtap0: refused to change device tx_queue_len [ 373.798705][T14867] netlink: 'syz.0.3449': attribute type 13 has an invalid length. [ 373.807174][T14867] macvtap0: refused to change device tx_queue_len [ 373.878893][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3449'. [ 374.133866][T14899] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3458'. [ 374.487057][T14913] device syzkaller0 entered promiscuous mode [ 374.825238][T14912] -1: renamed from syzkaller0 [ 375.085347][T14919] netlink: 'syz.3.3464': attribute type 2 has an invalid length. [ 375.100227][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3464'. [ 375.811503][T14957] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3474'. [ 375.854480][T14957] netlink: 'syz.0.3474': attribute type 10 has an invalid length. [ 375.979672][T14955] netlink: 'syz.3.3475': attribute type 2 has an invalid length. [ 377.554651][T15014] device syzkaller0 entered promiscuous mode [ 378.699041][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.705423][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.200022][T15031] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3497'. [ 381.546979][T15044] netlink: 'syz.3.3501': attribute type 39 has an invalid length. [ 381.696347][T15052] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3500'. [ 381.910873][T15047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3500'. [ 382.099813][T15064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3508'. [ 382.310045][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3510'. [ 382.586365][T15075] device syzkaller0 entered promiscuous mode [ 383.701077][T15113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3525'. [ 383.770421][T15113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3525'. [ 383.786127][T15113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3525'. [ 383.941556][T15117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3525'. [ 383.965050][T15111] netlink: 'syz.3.3524': attribute type 39 has an invalid length. [ 384.258912][T15118] netlink: 'syz.3.3524': attribute type 2 has an invalid length. [ 384.594285][T15122] device syzkaller0 entered promiscuous mode [ 385.629223][T15144] IPv6: Can't replace route, no match found [ 386.180649][T15162] netlink: 'syz.1.3540': attribute type 10 has an invalid length. [ 386.257913][T15162] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3540'. [ 386.495951][T15175] netlink: 'syz.4.3544': attribute type 2 has an invalid length. [ 386.535324][T15175] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3544'. [ 386.615268][T15184] netlink: 'syz.2.3545': attribute type 17 has an invalid length. [ 386.689129][T15184] netlink: 'syz.2.3545': attribute type 16 has an invalid length. [ 386.700466][T15191] netlink: 'syz.1.3549': attribute type 3 has an invalid length. [ 386.727825][T15191] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3549'. [ 386.737277][T15184] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3545'. [ 386.810185][T15189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3551'. [ 386.841259][T15195] netlink: 'syz.4.3552': attribute type 39 has an invalid length. [ 387.115973][T15209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 387.323893][T15215] device syzkaller0 entered promiscuous mode [ 387.587477][T15217] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3559'. [ 390.533238][T15244] netlink: 'syz.0.3567': attribute type 12 has an invalid length. [ 390.681913][T15244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3567'. [ 390.713541][T15243] netlink: 'syz.0.3567': attribute type 12 has an invalid length. [ 390.749678][T15243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3567'. [ 390.760610][T15250] netlink: 'syz.2.3570': attribute type 8 has an invalid length. [ 390.795047][T15250] netlink: 'syz.2.3570': attribute type 7 has an invalid length. [ 390.865096][T15250] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.3570'. [ 391.056415][T15269] netlink: 'syz.2.3574': attribute type 39 has an invalid length. [ 391.114885][T15273] device syzkaller0 entered promiscuous mode [ 391.857104][T15297] delete_channel: no stack [ 392.092510][T15307] tap0: tun_chr_ioctl cmd 1074025677 [ 392.098066][T15307] tap0: linktype set to 270 [ 392.118998][T15306] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.164509][T15310] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 392.678428][T15333] netlink: 'syz.3.3595': attribute type 2 has an invalid length. [ 392.710380][T15334] netlink: 'syz.0.3597': attribute type 10 has an invalid length. [ 392.746184][T15334] team0: Device hsr_slave_0 failed to register rx_handler [ 392.886315][T15341] device team_slave_1 entered promiscuous mode [ 393.127074][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 393.269578][T15366] netlink: 'syz.0.3608': attribute type 10 has an invalid length. [ 393.371210][T15366] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 393.587692][T15376] device syzkaller0 entered promiscuous mode [ 394.038413][T15383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3614'. [ 394.072162][T15383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3614'. [ 394.083038][T15383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3614'. [ 396.462288][ T4325] device veth0_to_bridge left promiscuous mode [ 396.506575][ T4325] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 396.658746][ T4325] device hsr_slave_0 left promiscuous mode [ 396.681108][ T4325] device hsr_slave_1 left promiscuous mode [ 396.687631][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.718957][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.756655][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.787120][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.912608][ T4325] device hsr_slave_0 left promiscuous mode [ 396.933698][ T4325] device hsr_slave_1 left promiscuous mode [ 397.038986][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.046487][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.129678][ T4325] device veth1_macvtap left promiscuous mode [ 397.135769][ T4325] device veth0_macvtap left promiscuous mode [ 397.214794][ T4325] device veth1_vlan left promiscuous mode [ 397.244416][ T4325] device veth0_vlan left promiscuous mode [ 397.341917][T15459] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 397.354697][T15459] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 397.389124][ T4325] device veth0_macvtap left promiscuous mode [ 397.395242][ T4325] device veth1_vlan left promiscuous mode [ 398.718342][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.778124][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.976511][ T4325] bond0 (unregistering): Released all slaves [ 399.086362][ T4325] team0 (unregistering): Port device geneve1 removed [ 399.438136][ T4325] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 399.471980][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 399.512634][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.551696][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.674244][ T4325] bond0 (unregistering): (slave team0): Releasing backup interface [ 399.715518][ T4325] bond0 (unregistering): Released all slaves [ 399.745428][T15436] device syzkaller0 entered promiscuous mode [ 399.797497][T15467] netlink: 'syz.3.3640': attribute type 10 has an invalid length. [ 401.705403][T15507] netlink: 'syz.4.3651': attribute type 6 has an invalid length. [ 401.771853][T15507] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3651'. [ 401.959978][T15512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3655'. [ 402.236587][T15520] netlink: 'syz.4.3658': attribute type 21 has an invalid length. [ 402.280055][T15520] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3658'. [ 402.288488][T15522] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 402.368911][T15522] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 402.465620][T15522] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 403.076099][T15542] netlink: 'syz.4.3666': attribute type 21 has an invalid length. [ 403.121708][T15542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3666'. [ 403.514227][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 403.630662][T15555] netlink: 'syz.3.3668': attribute type 6 has an invalid length. [ 403.653792][T15555] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3668'. [ 403.779019][T15558] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3668'. [ 404.206152][T15567] netlink: 'syz.4.3673': attribute type 29 has an invalid length. [ 404.236035][T15567] netlink: 'syz.4.3673': attribute type 29 has an invalid length. [ 404.274253][T15567] netlink: 205184 bytes leftover after parsing attributes in process `syz.4.3673'. [ 404.455496][T15573] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3675'. [ 404.847902][T15586] validate_nla: 5 callbacks suppressed [ 404.847938][T15586] netlink: 'syz.4.3679': attribute type 3 has an invalid length. [ 404.926912][T15586] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3679'. [ 405.042476][T15586] pim6reg: tun_chr_ioctl cmd 1074025677 [ 405.100035][T15586] pim6reg: linktype set to 778 [ 405.458093][T15615] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 405.524639][T15615] team0: Device hsr_slave_0 failed to register rx_handler [ 405.577428][T15617] netlink: 'syz.0.3687': attribute type 6 has an invalid length. [ 406.009147][T15624] netlink: 'syz.1.3691': attribute type 21 has an invalid length. [ 406.378706][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 406.855943][T15694] __nla_validate_parse: 2 callbacks suppressed [ 406.855960][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3713'. [ 406.954853][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3713'. [ 407.054114][T15690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3713'. [ 407.094572][T15703] netlink: 'syz.2.3717': attribute type 27 has an invalid length. [ 407.136515][T15696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3713'. [ 407.145623][T15703] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3717'. [ 407.312819][T15721] netlink: 'syz.1.3722': attribute type 21 has an invalid length. [ 407.365497][T15724] netlink: 'syz.4.3725': attribute type 3 has an invalid length. [ 407.373839][T15724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3725'. [ 407.402612][T15721] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3722'. [ 408.021210][T15777] netlink: 'syz.2.3741': attribute type 10 has an invalid length. [ 408.038238][T15777] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3741'. [ 408.206708][T15784] sctp: [Deprecated]: syz.1.3743 (pid 15784) Use of int in max_burst socket option deprecated. [ 408.206708][T15784] Use struct sctp_assoc_value instead [ 408.434142][T15781] delete_channel: no stack [ 408.606292][T15790] netlink: 'syz.3.3745': attribute type 9 has an invalid length. [ 408.626129][T15796] netlink: 'syz.2.3746': attribute type 29 has an invalid length. [ 408.634315][T15790] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3745'. [ 408.812755][T15799] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3745'. [ 410.632330][T15879] validate_nla: 9 callbacks suppressed [ 410.632346][T15879] netlink: 'syz.2.3776': attribute type 2 has an invalid length. [ 411.710474][T15901] netlink: 'syz.2.3784': attribute type 7 has an invalid length. [ 411.828961][T15913] device syzkaller0 entered promiscuous mode [ 412.301959][T15914] device syzkaller0 entered promiscuous mode [ 412.551079][T15930] __nla_validate_parse: 8 callbacks suppressed [ 412.551098][T15930] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3793'. [ 412.807959][T15937] device syzkaller0 entered promiscuous mode [ 413.578430][T15962] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3801'. [ 413.676219][T15964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3801'. [ 413.895586][T15978] netlink: 'syz.4.3806': attribute type 9 has an invalid length. [ 413.934450][T15978] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3806'. [ 414.228105][T15983] device syzkaller0 entered promiscuous mode [ 414.725568][T15999] netlink: 'syz.4.3812': attribute type 29 has an invalid length. [ 414.753321][T15999] netlink: 'syz.4.3812': attribute type 29 has an invalid length. [ 415.467170][T16032] sctp: [Deprecated]: syz.3.3832 (pid 16032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.467170][T16032] Use struct sctp_sack_info instead [ 415.553744][T16032] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3832'. [ 415.589737][T16034] device syzkaller0 entered promiscuous mode [ 417.093036][T16090] netlink: 'syz.4.3839': attribute type 1 has an invalid length. [ 417.136835][T16090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.317735][T16094] netlink: 'syz.2.3841': attribute type 29 has an invalid length. [ 417.358728][T16094] netlink: 'syz.2.3841': attribute type 29 has an invalid length. [ 417.883947][T16120] device syzkaller0 entered promiscuous mode [ 418.003619][T16124] netlink: 'syz.3.3849': attribute type 10 has an invalid length. [ 418.100042][T16124] team0: Port device dummy0 added [ 418.222437][T16134] device syzkaller0 entered promiscuous mode [ 418.358230][T16143] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3855'. [ 418.410355][T16141] netlink: 'syz.2.3854': attribute type 11 has an invalid length. [ 418.439289][T16141] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3854'. [ 418.643088][T16147] netlink: 'syz.4.3856': attribute type 2 has an invalid length. [ 418.699425][T16147] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3856'. [ 420.301865][T16227] netlink: 'syz.3.3882': attribute type 10 has an invalid length. [ 420.331136][T16227] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3882'. [ 420.791112][T16248] netlink: 'syz.2.3888': attribute type 8 has an invalid length. [ 420.800315][T16248] netlink: 'syz.2.3888': attribute type 7 has an invalid length. [ 420.808356][T16248] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.3888'. [ 421.139662][T16260] netlink: 'syz.2.3891': attribute type 21 has an invalid length. [ 421.176624][T16259] device syzkaller0 entered promiscuous mode [ 421.231657][T16265] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.3902'. [ 421.728993][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 421.794462][T16283] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3900'. [ 421.847531][T16279] bridge0: port 3(dummy0) entered disabled state [ 421.854884][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.863280][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.034096][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3900'. [ 422.477096][T16311] validate_nla: 1 callbacks suppressed [ 422.477111][T16311] netlink: 'syz.0.3905': attribute type 21 has an invalid length. [ 423.029198][T16345] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3919'. [ 423.206902][T16351] netlink: 'syz.3.3921': attribute type 3 has an invalid length. [ 423.605948][T16369] device syzkaller0 entered promiscuous mode [ 423.804994][T16366] netlink: 'syz.4.3923': attribute type 21 has an invalid length. [ 423.933618][T16374] device syzkaller0 entered promiscuous mode [ 424.304412][T16391] netlink: 'syz.0.3932': attribute type 3 has an invalid length. [ 424.312309][T16391] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3932'. [ 424.627150][T16403] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 424.629103][T16405] netlink: 'syz.1.3937': attribute type 27 has an invalid length. [ 424.654188][T16405] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3937'. [ 425.629589][T16432] netlink: 'syz.0.3947': attribute type 11 has an invalid length. [ 425.682912][T16432] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3947'. [ 426.358302][T16449] device syzkaller0 entered promiscuous mode [ 427.496461][T16474] device syzkaller0 entered promiscuous mode [ 427.565628][T16487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3966'. [ 427.582997][T16487] netlink: 'syz.1.3966': attribute type 10 has an invalid length. [ 427.592224][T16487] team0: Device hsr_slave_0 failed to register rx_handler [ 427.946200][T16499] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3970'. [ 428.537538][T16525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3980'. [ 428.605317][T16525] netlink: 'syz.0.3980': attribute type 10 has an invalid length. [ 428.648207][T16525] team0: Device hsr_slave_0 failed to register rx_handler [ 428.756428][T16536] device syzkaller0 entered promiscuous mode [ 428.872578][T16542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3987'. [ 428.989529][T16542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3987'. [ 429.090440][T16542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3987'. [ 429.482976][T16542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3987'. [ 429.538679][T16559] netlink: 'syz.2.3991': attribute type 30 has an invalid length. [ 429.792375][T16579] netlink: 'syz.0.3996': attribute type 21 has an invalid length. [ 429.808906][T16579] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3996'. [ 429.888684][T16587] device syzkaller0 entered promiscuous mode [ 430.017463][T16589] netlink: 'syz.4.4000': attribute type 10 has an invalid length. [ 430.058652][T16589] team0: Device hsr_slave_0 failed to register rx_handler [ 430.218928][T16594] device syzkaller0 entered promiscuous mode [ 430.334911][T16594] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 430.809023][T16628] device wlan0 entered promiscuous mode [ 430.853248][T16628] netlink: 'syz.4.4011': attribute type 9 has an invalid length. [ 430.943350][T16628] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4011'. [ 431.227307][T16639] netlink: 'syz.0.4017': attribute type 10 has an invalid length. [ 431.236449][T16639] team0: Device hsr_slave_0 failed to register rx_handler [ 431.413427][T16647] device syzkaller0 entered promiscuous mode [ 431.854050][T16671] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4027'. [ 431.904409][T16677] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4030'. [ 432.474914][T16694] device syzkaller0 entered promiscuous mode [ 432.806399][T16706] netlink: 'syz.4.4037': attribute type 3 has an invalid length. [ 432.880341][T16706] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4037'. [ 433.572988][T16728] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4044'. [ 435.147979][T16788] device syzkaller0 entered promiscuous mode [ 435.220832][T16799] netlink: 'syz.3.4067': attribute type 27 has an invalid length. [ 435.278922][T16799] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4067'. [ 435.670078][T16825] netlink: 'syz.2.4074': attribute type 3 has an invalid length. [ 435.705900][T16825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4074'. [ 436.043892][T16841] netlink: 'syz.4.4080': attribute type 1 has an invalid length. [ 436.068444][T16841] netlink: 'syz.4.4080': attribute type 3 has an invalid length. [ 436.076745][T16841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4080'. [ 436.267232][T16852] netlink: 'syz.3.4083': attribute type 3 has an invalid length. [ 436.285394][T16852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4083'. [ 439.614030][T16875] netlink: 'syz.1.4091': attribute type 2 has an invalid length. [ 439.678368][T16875] netlink: 'syz.1.4091': attribute type 8 has an invalid length. [ 439.690874][T16875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4091'. [ 439.702134][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'. [ 439.711699][T16874] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4093'. [ 439.767244][T16883] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4093'. [ 440.288376][T16918] FAULT_INJECTION: forcing a failure. [ 440.288376][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.343728][T16918] CPU: 1 PID: 16918 Comm: syz.1.4105 Not tainted syzkaller #0 [ 440.351227][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.361281][T16918] Call Trace: [ 440.364559][T16918] [ 440.367489][T16918] dump_stack_lvl+0x188/0x250 [ 440.372181][T16918] ? show_regs_print_info+0x20/0x20 [ 440.377382][T16918] ? load_image+0x400/0x400 [ 440.381889][T16918] ? __lock_acquire+0x7d10/0x7d10 [ 440.386920][T16918] should_fail+0x38c/0x4c0 [ 440.391341][T16918] _copy_from_user+0x2e/0x170 [ 440.396019][T16918] __copy_msghdr_from_user+0xc9/0x630 [ 440.399092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.401392][T16918] ? verify_lock_unused+0x140/0x140 [ 440.407641][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.412788][T16918] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 440.412820][T16918] ___sys_sendmsg+0x19a/0x2e0 [ 440.412845][T16918] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.433745][T16918] ? trace_event_raw_event_lock+0x270/0x270 [ 440.439649][T16918] ? vfs_write+0x8b2/0xd60 [ 440.444095][T16918] __se_sys_sendmsg+0x1af/0x290 [ 440.448959][T16918] ? __x64_sys_sendmsg+0x80/0x80 [ 440.453905][T16918] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 440.459900][T16918] ? lockdep_hardirqs_on+0x94/0x140 [ 440.465100][T16918] do_syscall_64+0x4c/0xa0 [ 440.469514][T16918] ? clear_bhb_loop+0x30/0x80 [ 440.474190][T16918] ? clear_bhb_loop+0x30/0x80 [ 440.478863][T16918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 440.484751][T16918] RIP: 0033:0x7f2d268e6cb9 [ 440.489176][T16918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.508784][T16918] RSP: 002b:00007f2d24b21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.517204][T16918] RAX: ffffffffffffffda RBX: 00007f2d26b62090 RCX: 00007f2d268e6cb9 [ 440.525174][T16918] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000004 [ 440.533142][T16918] RBP: 00007f2d24b21090 R08: 0000000000000000 R09: 0000000000000000 [ 440.541115][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.549085][T16918] R13: 00007f2d26b62128 R14: 00007f2d26b62090 R15: 00007ffdb3153568 [ 440.557063][T16918] [ 441.226236][T16939] netlink: 'syz.1.4110': attribute type 40 has an invalid length. [ 441.253511][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.653354][T16940] device syzkaller0 entered promiscuous mode [ 442.052626][T16966] FAULT_INJECTION: forcing a failure. [ 442.052626][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.070312][T16966] CPU: 0 PID: 16966 Comm: syz.2.4119 Not tainted syzkaller #0 [ 442.077809][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.087878][T16966] Call Trace: [ 442.091163][T16966] [ 442.094097][T16966] dump_stack_lvl+0x188/0x250 [ 442.098786][T16966] ? show_regs_print_info+0x20/0x20 [ 442.103995][T16966] ? load_image+0x400/0x400 [ 442.108601][T16966] ? __lock_acquire+0x7d10/0x7d10 [ 442.113643][T16966] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 442.119555][T16966] should_fail+0x38c/0x4c0 [ 442.123989][T16966] _copy_from_user+0x2e/0x170 [ 442.128676][T16966] __copy_msghdr_from_user+0x48a/0x630 [ 442.134139][T16966] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 442.139898][T16966] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 442.145245][T16966] ___sys_sendmsg+0x19a/0x2e0 [ 442.149952][T16966] ? __sys_sendmsg+0x2a0/0x2a0 [ 442.154757][T16966] ? trace_event_raw_event_lock+0x270/0x270 [ 442.160660][T16966] ? vfs_write+0x8b2/0xd60 [ 442.165133][T16966] __se_sys_sendmsg+0x1af/0x290 [ 442.170000][T16966] ? __x64_sys_sendmsg+0x80/0x80 [ 442.174946][T16966] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 442.180973][T16966] ? lockdep_hardirqs_on+0x94/0x140 [ 442.186198][T16966] do_syscall_64+0x4c/0xa0 [ 442.190639][T16966] ? clear_bhb_loop+0x30/0x80 [ 442.195316][T16966] ? clear_bhb_loop+0x30/0x80 [ 442.199996][T16966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.205897][T16966] RIP: 0033:0x7fb598c5ecb9 [ 442.210326][T16966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.229945][T16966] RSP: 002b:00007fb596eba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.238375][T16966] RAX: ffffffffffffffda RBX: 00007fb598ed9fa0 RCX: 00007fb598c5ecb9 [ 442.246357][T16966] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 442.254345][T16966] RBP: 00007fb596eba090 R08: 0000000000000000 R09: 0000000000000000 [ 442.262328][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.270314][T16966] R13: 00007fb598eda038 R14: 00007fb598ed9fa0 R15: 00007ffcecfdc578 [ 442.278326][T16966] [ 442.425861][T16979] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 442.444130][T16979] syzkaller0: linktype set to 27 [ 443.571214][T17011] FAULT_INJECTION: forcing a failure. [ 443.571214][T17011] name failslab, interval 1, probability 0, space 0, times 0 [ 443.600099][T17011] CPU: 1 PID: 17011 Comm: syz.2.4134 Not tainted syzkaller #0 [ 443.607602][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.617715][T17011] Call Trace: [ 443.621016][T17011] [ 443.623953][T17011] dump_stack_lvl+0x188/0x250 [ 443.628732][T17011] ? show_regs_print_info+0x20/0x20 [ 443.633944][T17011] ? load_image+0x400/0x400 [ 443.638462][T17011] ? __might_sleep+0xf0/0xf0 [ 443.643065][T17011] ? __lock_acquire+0x7d10/0x7d10 [ 443.648116][T17011] should_fail+0x38c/0x4c0 [ 443.652569][T17011] should_failslab+0x5/0x20 [ 443.657177][T17011] slab_pre_alloc_hook+0x51/0xc0 [ 443.662129][T17011] kmem_cache_alloc_trace+0x47/0x2a0 [ 443.667427][T17011] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 443.672826][T17011] tcp_sendmsg_fastopen+0x1d5/0x600 [ 443.678058][T17011] tcp_sendmsg_locked+0x30cc/0x35f0 [ 443.683279][T17011] ? perf_trace_lock+0x301/0x390 [ 443.688237][T17011] ? mark_lock+0x94/0x320 [ 443.692571][T17011] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.698564][T17011] ? lock_chain_count+0x20/0x20 [ 443.703429][T17011] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 443.709422][T17011] ? tcp_free_fastopen_req+0x70/0x70 [ 443.714730][T17011] tcp_sendmsg+0x2b/0x40 [ 443.718980][T17011] ? inet_send_prepare+0x260/0x260 [ 443.724099][T17011] ____sys_sendmsg+0x5b7/0x8f0 [ 443.728879][T17011] ? __sys_sendmsg_sock+0x30/0x30 [ 443.733921][T17011] ? import_iovec+0x6f/0xa0 [ 443.738440][T17011] ___sys_sendmsg+0x236/0x2e0 [ 443.743129][T17011] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.747891][T17011] ? trace_event_raw_event_lock+0x270/0x270 [ 443.753781][T17011] ? vfs_write+0x8b2/0xd60 [ 443.758202][T17011] __se_sys_sendmsg+0x1af/0x290 [ 443.763044][T17011] ? __x64_sys_sendmsg+0x80/0x80 [ 443.767976][T17011] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.773954][T17011] ? lockdep_hardirqs_on+0x94/0x140 [ 443.779138][T17011] do_syscall_64+0x4c/0xa0 [ 443.783538][T17011] ? clear_bhb_loop+0x30/0x80 [ 443.788196][T17011] ? clear_bhb_loop+0x30/0x80 [ 443.792857][T17011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.798735][T17011] RIP: 0033:0x7fb598c5ecb9 [ 443.803146][T17011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.822734][T17011] RSP: 002b:00007fb596eba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.831134][T17011] RAX: ffffffffffffffda RBX: 00007fb598ed9fa0 RCX: 00007fb598c5ecb9 [ 443.839090][T17011] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 443.847050][T17011] RBP: 00007fb596eba090 R08: 0000000000000000 R09: 0000000000000000 [ 443.855020][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.863081][T17011] R13: 00007fb598eda038 R14: 00007fb598ed9fa0 R15: 00007ffcecfdc578 [ 443.871064][T17011] [ 444.142104][T17036] netlink: 'syz.0.4142': attribute type 21 has an invalid length. [ 444.187725][T17036] netlink: 'syz.0.4142': attribute type 6 has an invalid length. [ 444.736708][T17120] FAULT_INJECTION: forcing a failure. [ 444.736708][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 444.749450][T17120] CPU: 0 PID: 17120 Comm: syz.3.4152 Not tainted syzkaller #0 [ 444.756921][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.766986][T17120] Call Trace: [ 444.770261][T17120] [ 444.773183][T17120] dump_stack_lvl+0x188/0x250 [ 444.777855][T17120] ? lock_chain_count+0x20/0x20 [ 444.782698][T17120] ? show_regs_print_info+0x20/0x20 [ 444.787886][T17120] ? load_image+0x400/0x400 [ 444.792389][T17120] ? __inet_hash_connect+0x234/0xe40 [ 444.797670][T17120] should_fail+0x38c/0x4c0 [ 444.802085][T17120] should_failslab+0x5/0x20 [ 444.806574][T17120] slab_pre_alloc_hook+0x51/0xc0 [ 444.811502][T17120] ? __inet_hash_connect+0x7c4/0xe40 [ 444.816785][T17120] kmem_cache_alloc+0x3d/0x290 [ 444.821548][T17120] __inet_hash_connect+0x7c4/0xe40 [ 444.826742][T17120] ? inet_hash_connect+0x130/0x130 [ 444.831856][T17120] ? inet_unhash+0x540/0x540 [ 444.836433][T17120] ? rcu_is_watching+0x11/0xa0 [ 444.841197][T17120] tcp_v4_connect+0xd00/0x1a80 [ 444.845984][T17120] ? tcp_twsk_unique+0x990/0x990 [ 444.850933][T17120] __inet_stream_connect+0x244/0xd70 [ 444.856233][T17120] ? inet_dgram_connect+0x360/0x360 [ 444.861481][T17120] tcp_sendmsg_fastopen+0x38f/0x600 [ 444.866678][T17120] tcp_sendmsg_locked+0x30cc/0x35f0 [ 444.871881][T17120] ? perf_trace_lock+0x301/0x390 [ 444.876821][T17120] ? mark_lock+0x94/0x320 [ 444.881140][T17120] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 444.887112][T17120] ? lock_chain_count+0x20/0x20 [ 444.891951][T17120] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 444.898011][T17120] ? tcp_free_fastopen_req+0x70/0x70 [ 444.903306][T17120] tcp_sendmsg+0x2b/0x40 [ 444.907541][T17120] ? inet_send_prepare+0x260/0x260 [ 444.912640][T17120] ____sys_sendmsg+0x5b7/0x8f0 [ 444.917412][T17120] ? __sys_sendmsg_sock+0x30/0x30 [ 444.922447][T17120] ? import_iovec+0x6f/0xa0 [ 444.926955][T17120] ___sys_sendmsg+0x236/0x2e0 [ 444.931637][T17120] ? __sys_sendmsg+0x2a0/0x2a0 [ 444.936406][T17120] ? trace_event_raw_event_lock+0x270/0x270 [ 444.942285][T17120] ? vfs_write+0x8b2/0xd60 [ 444.946720][T17120] __se_sys_sendmsg+0x1af/0x290 [ 444.951563][T17120] ? __x64_sys_sendmsg+0x80/0x80 [ 444.956484][T17120] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 444.962469][T17120] ? lockdep_hardirqs_on+0x94/0x140 [ 444.967676][T17120] do_syscall_64+0x4c/0xa0 [ 444.972077][T17120] ? clear_bhb_loop+0x30/0x80 [ 444.976741][T17120] ? clear_bhb_loop+0x30/0x80 [ 444.981408][T17120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.987282][T17120] RIP: 0033:0x7f1c574f1cb9 [ 444.991686][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.011281][T17120] RSP: 002b:00007f1c5574d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.019691][T17120] RAX: ffffffffffffffda RBX: 00007f1c5776cfa0 RCX: 00007f1c574f1cb9 [ 445.027650][T17120] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 445.035609][T17120] RBP: 00007f1c5574d090 R08: 0000000000000000 R09: 0000000000000000 [ 445.043563][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.051520][T17120] R13: 00007f1c5776d038 R14: 00007f1c5776cfa0 R15: 00007ffd60134078 [ 445.059507][T17120] [ 445.630186][T17135] device syzkaller0 entered promiscuous mode [ 445.870781][T17164] netlink: 'syz.1.4164': attribute type 9 has an invalid length. [ 445.898931][T17164] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4164'. [ 445.973937][T17159] device wlan0 left promiscuous mode [ 446.189669][T17178] FAULT_INJECTION: forcing a failure. [ 446.189669][T17178] name failslab, interval 1, probability 0, space 0, times 0 [ 446.252029][T17178] CPU: 1 PID: 17178 Comm: syz.0.4169 Not tainted syzkaller #0 [ 446.259529][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.269593][T17178] Call Trace: [ 446.272882][T17178] [ 446.275814][T17178] dump_stack_lvl+0x188/0x250 [ 446.280501][T17178] ? show_regs_print_info+0x20/0x20 [ 446.285707][T17178] ? load_image+0x400/0x400 [ 446.290222][T17178] ? __lock_acquire+0x7d10/0x7d10 [ 446.295255][T17178] ? inet_sk_rebuild_header+0x90/0x1c40 [ 446.300814][T17178] should_fail+0x38c/0x4c0 [ 446.305241][T17178] should_failslab+0x5/0x20 [ 446.309747][T17178] slab_pre_alloc_hook+0x51/0xc0 [ 446.314695][T17178] kmem_cache_alloc_node+0x47/0x2d0 [ 446.319894][T17178] ? __alloc_skb+0xf4/0x750 [ 446.324439][T17178] __alloc_skb+0xf4/0x750 [ 446.328777][T17178] sk_stream_alloc_skb+0x1fa/0xa60 [ 446.333897][T17178] tcp_connect+0x16cb/0x4970 [ 446.338518][T17178] ? secure_tcp_ts_off+0xba/0x180 [ 446.343553][T17178] ? prandom_u32+0x217/0x250 [ 446.348159][T17178] tcp_v4_connect+0x103e/0x1a80 [ 446.353043][T17178] ? tcp_twsk_unique+0x990/0x990 [ 446.357996][T17178] __inet_stream_connect+0x244/0xd70 [ 446.363304][T17178] ? inet_dgram_connect+0x360/0x360 [ 446.368541][T17178] tcp_sendmsg_fastopen+0x38f/0x600 [ 446.373851][T17178] tcp_sendmsg_locked+0x30cc/0x35f0 [ 446.379064][T17178] ? aa_sk_perm+0x910/0x910 [ 446.383594][T17178] ? __lock_acquire+0x12e8/0x7d10 [ 446.388636][T17178] ? mark_lock+0x94/0x320 [ 446.392978][T17178] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 446.398961][T17178] ? lock_chain_count+0x20/0x20 [ 446.403797][T17178] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 446.409761][T17178] ? tcp_free_fastopen_req+0x70/0x70 [ 446.415033][T17178] tcp_sendmsg+0x2b/0x40 [ 446.419254][T17178] ? inet_send_prepare+0x260/0x260 [ 446.424354][T17178] ____sys_sendmsg+0x5b7/0x8f0 [ 446.429111][T17178] ? __sys_sendmsg_sock+0x30/0x30 [ 446.434121][T17178] ? import_iovec+0x6f/0xa0 [ 446.438609][T17178] ___sys_sendmsg+0x236/0x2e0 [ 446.443276][T17178] ? __sys_sendmsg+0x2a0/0x2a0 [ 446.448176][T17178] ? vfs_write+0x8b2/0xd60 [ 446.452594][T17178] __se_sys_sendmsg+0x1af/0x290 [ 446.457506][T17178] ? __x64_sys_sendmsg+0x80/0x80 [ 446.462441][T17178] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 446.468573][T17178] ? lockdep_hardirqs_on+0x94/0x140 [ 446.473762][T17178] do_syscall_64+0x4c/0xa0 [ 446.478155][T17178] ? clear_bhb_loop+0x30/0x80 [ 446.482810][T17178] ? clear_bhb_loop+0x30/0x80 [ 446.487468][T17178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 446.493337][T17178] RIP: 0033:0x7f8e5cd85cb9 [ 446.497730][T17178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.517314][T17178] RSP: 002b:00007f8e5afc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.525713][T17178] RAX: ffffffffffffffda RBX: 00007f8e5d001090 RCX: 00007f8e5cd85cb9 [ 446.533667][T17178] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 446.541619][T17178] RBP: 00007f8e5afc0090 R08: 0000000000000000 R09: 0000000000000000 [ 446.549579][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.557549][T17178] R13: 00007f8e5d001128 R14: 00007f8e5d001090 R15: 00007fff68544368 [ 446.565613][T17178] [ 447.333230][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 447.585882][T17215] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 447.608155][T17217] FAULT_INJECTION: forcing a failure. [ 447.608155][T17217] name failslab, interval 1, probability 0, space 0, times 0 [ 447.647397][T17215] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.4181'. [ 447.678984][T17217] CPU: 0 PID: 17217 Comm: syz.1.4182 Not tainted syzkaller #0 [ 447.686501][T17217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.696664][T17217] Call Trace: [ 447.699953][T17217] [ 447.702897][T17217] dump_stack_lvl+0x188/0x250 [ 447.707588][T17217] ? show_regs_print_info+0x20/0x20 [ 447.712797][T17217] ? load_image+0x400/0x400 [ 447.717330][T17217] ? __lock_acquire+0x7d10/0x7d10 [ 447.722377][T17217] ? inet_sk_rebuild_header+0x90/0x1c40 [ 447.727940][T17217] should_fail+0x38c/0x4c0 [ 447.732381][T17217] should_failslab+0x5/0x20 [ 447.736901][T17217] slab_pre_alloc_hook+0x51/0xc0 [ 447.741933][T17217] kmem_cache_alloc_node+0x47/0x2d0 [ 447.747137][T17217] ? __alloc_skb+0xf4/0x750 [ 447.751660][T17217] __alloc_skb+0xf4/0x750 [ 447.756008][T17217] sk_stream_alloc_skb+0x1fa/0xa60 [ 447.761147][T17217] tcp_connect+0x16cb/0x4970 [ 447.765795][T17217] ? secure_tcp_ts_off+0xba/0x180 [ 447.770842][T17217] ? prandom_u32+0x217/0x250 [ 447.775462][T17217] tcp_v4_connect+0x103e/0x1a80 [ 447.780375][T17217] ? tcp_twsk_unique+0x990/0x990 [ 447.785347][T17217] __inet_stream_connect+0x244/0xd70 [ 447.790669][T17217] ? inet_dgram_connect+0x360/0x360 [ 447.795911][T17217] tcp_sendmsg_fastopen+0x38f/0x600 [ 447.801135][T17217] tcp_sendmsg_locked+0x30cc/0x35f0 [ 447.806356][T17217] ? perf_trace_lock+0x301/0x390 [ 447.811342][T17217] ? mark_lock+0x94/0x320 [ 447.815693][T17217] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 447.821700][T17217] ? lock_chain_count+0x20/0x20 [ 447.826569][T17217] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 447.832581][T17217] ? tcp_free_fastopen_req+0x70/0x70 [ 447.837919][T17217] tcp_sendmsg+0x2b/0x40 [ 447.842169][T17217] ? inet_send_prepare+0x260/0x260 [ 447.847292][T17217] ____sys_sendmsg+0x5b7/0x8f0 [ 447.852086][T17217] ? __sys_sendmsg_sock+0x30/0x30 [ 447.857149][T17217] ? import_iovec+0x6f/0xa0 [ 447.861673][T17217] ___sys_sendmsg+0x236/0x2e0 [ 447.866384][T17217] ? __sys_sendmsg+0x2a0/0x2a0 [ 447.871268][T17217] ? trace_event_raw_event_lock+0x270/0x270 [ 447.877188][T17217] ? vfs_write+0x8b2/0xd60 [ 447.881659][T17217] __se_sys_sendmsg+0x1af/0x290 [ 447.886539][T17217] ? __x64_sys_sendmsg+0x80/0x80 [ 447.891481][T17217] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 447.897514][T17217] ? lockdep_hardirqs_on+0x94/0x140 [ 447.902733][T17217] do_syscall_64+0x4c/0xa0 [ 447.907164][T17217] ? clear_bhb_loop+0x30/0x80 [ 447.911848][T17217] ? clear_bhb_loop+0x30/0x80 [ 447.916539][T17217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.922437][T17217] RIP: 0033:0x7f2d268e6cb9 [ 447.926868][T17217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.946501][T17217] RSP: 002b:00007f2d24b42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.954932][T17217] RAX: ffffffffffffffda RBX: 00007f2d26b61fa0 RCX: 00007f2d268e6cb9 [ 447.962911][T17217] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 447.970889][T17217] RBP: 00007f2d24b42090 R08: 0000000000000000 R09: 0000000000000000 [ 447.978873][T17217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.986851][T17217] R13: 00007f2d26b62038 R14: 00007f2d26b61fa0 R15: 00007ffdb3153568 [ 447.994864][T17217] [ 448.216976][T17241] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 448.299722][T17241] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4188'. [ 448.395363][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 448.404985][T17241] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4188'. [ 448.479456][T17244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.525962][T17245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 448.554734][T17245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.162065][T17285] FAULT_INJECTION: forcing a failure. [ 449.162065][T17285] name failslab, interval 1, probability 0, space 0, times 0 [ 449.179958][T17285] CPU: 0 PID: 17285 Comm: syz.1.4202 Not tainted syzkaller #0 [ 449.187455][T17285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.197529][T17285] Call Trace: [ 449.200817][T17285] [ 449.203760][T17285] dump_stack_lvl+0x188/0x250 [ 449.208465][T17285] ? show_regs_print_info+0x20/0x20 [ 449.213772][T17285] ? load_image+0x400/0x400 [ 449.218312][T17285] ? rcu_lock_release+0x5/0x20 [ 449.223102][T17285] should_fail+0x38c/0x4c0 [ 449.227653][T17285] should_failslab+0x5/0x20 [ 449.232177][T17285] slab_pre_alloc_hook+0x51/0xc0 [ 449.237143][T17285] ? __nf_conntrack_alloc+0x99/0x380 [ 449.242444][T17285] kmem_cache_alloc+0x3d/0x290 [ 449.247236][T17285] __nf_conntrack_alloc+0x99/0x380 [ 449.252375][T17285] init_conntrack+0x258/0x14d0 [ 449.257206][T17285] ? __nf_conntrack_find_get+0x581/0x650 [ 449.262861][T17285] ? early_drop+0x810/0x810 [ 449.267386][T17285] ? nf_conntrack_find_get+0x670/0x670 [ 449.272860][T17285] ? __siphash_unaligned+0x258/0x3a0 [ 449.278184][T17285] nf_conntrack_in+0xd38/0x1730 [ 449.283100][T17285] ? nf_ct_pernet+0x240/0x240 [ 449.287865][T17285] ? ipv4_conntrack_defrag+0x284/0x590 [ 449.293353][T17285] ? ipv4_conntrack_local+0x11f/0x200 [ 449.298748][T17285] ? ipv4_conntrack_in+0x20/0x20 [ 449.303697][T17285] nf_hook_slow+0xb9/0x200 [ 449.308132][T17285] ? nf_hook+0x360/0x360 [ 449.312387][T17285] nf_hook+0x205/0x360 [ 449.316487][T17285] ? __ip_local_out+0x5e0/0x5e0 [ 449.321353][T17285] ? nf_hook+0x360/0x360 [ 449.325631][T17285] __ip_local_out+0x4b7/0x5e0 [ 449.330320][T17285] ? nf_hook+0x360/0x360 [ 449.334581][T17285] __ip_queue_xmit+0x10f8/0x1c00 [ 449.339564][T17285] __tcp_transmit_skb+0x1d11/0x3200 [ 449.344826][T17285] ? __tcp_send_ack+0x5d0/0x5d0 [ 449.349723][T17285] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 449.355558][T17285] tcp_connect+0x2d71/0x4970 [ 449.360249][T17285] tcp_v4_connect+0x103e/0x1a80 [ 449.365292][T17285] ? tcp_twsk_unique+0x990/0x990 [ 449.370274][T17285] __inet_stream_connect+0x244/0xd70 [ 449.375603][T17285] ? inet_dgram_connect+0x360/0x360 [ 449.380850][T17285] tcp_sendmsg_fastopen+0x38f/0x600 [ 449.386073][T17285] tcp_sendmsg_locked+0x30cc/0x35f0 [ 449.391296][T17285] ? perf_trace_lock+0x301/0x390 [ 449.396282][T17285] ? mark_lock+0x94/0x320 [ 449.400633][T17285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 449.406630][T17285] ? lock_chain_count+0x20/0x20 [ 449.411499][T17285] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 449.417506][T17285] ? tcp_free_fastopen_req+0x70/0x70 [ 449.422845][T17285] tcp_sendmsg+0x2b/0x40 [ 449.427099][T17285] ? inet_send_prepare+0x260/0x260 [ 449.432218][T17285] ____sys_sendmsg+0x5b7/0x8f0 [ 449.437135][T17285] ? __sys_sendmsg_sock+0x30/0x30 [ 449.442228][T17285] ? import_iovec+0x6f/0xa0 [ 449.446758][T17285] ___sys_sendmsg+0x236/0x2e0 [ 449.451468][T17285] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.456268][T17285] ? trace_event_raw_event_lock+0x270/0x270 [ 449.462180][T17285] ? vfs_write+0x8b2/0xd60 [ 449.466663][T17285] __se_sys_sendmsg+0x1af/0x290 [ 449.471533][T17285] ? __x64_sys_sendmsg+0x80/0x80 [ 449.476482][T17285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 449.482510][T17285] ? lockdep_hardirqs_on+0x94/0x140 [ 449.487870][T17285] do_syscall_64+0x4c/0xa0 [ 449.492303][T17285] ? clear_bhb_loop+0x30/0x80 [ 449.496994][T17285] ? clear_bhb_loop+0x30/0x80 [ 449.501685][T17285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.507591][T17285] RIP: 0033:0x7f2d268e6cb9 [ 449.512060][T17285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.531681][T17285] RSP: 002b:00007f2d24b42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.540114][T17285] RAX: ffffffffffffffda RBX: 00007f2d26b61fa0 RCX: 00007f2d268e6cb9 [ 449.548098][T17285] RDX: 0000000030048880 RSI: 0000200000000000 RDI: 0000000000000005 [ 449.556083][T17285] RBP: 00007f2d24b42090 R08: 0000000000000000 R09: 0000000000000000 [ 449.564070][T17285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.572053][T17285] R13: 00007f2d26b62038 R14: 00007f2d26b61fa0 R15: 00007ffdb3153568 [ 449.580072][T17285] [ 449.706475][T17294] netlink: 'syz.3.4205': attribute type 21 has an invalid length. [ 449.763909][T17294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4205'. [ 450.069221][T17310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 450.176933][T17310] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.4209'. [ 451.193526][T17347] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4222'. [ 451.487416][T17367] netlink: 'syz.3.4226': attribute type 41 has an invalid length. [ 451.625217][T17373] netlink: 'syz.0.4230': attribute type 10 has an invalid length. [ 451.643068][T17373] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.650494][T17373] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.668558][T17373] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.675762][T17373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.683217][T17373] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.690344][T17373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.718274][T17373] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 451.765192][T17390] netlink: 'syz.1.4235': attribute type 21 has an invalid length. [ 451.794485][T17390] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4235'. [ 451.816368][T17390] netlink: 'syz.1.4235': attribute type 4 has an invalid length. [ 451.876326][T17394] sctp: [Deprecated]: syz.0.4237 (pid 17394) Use of int in max_burst socket option deprecated. [ 451.876326][T17394] Use struct sctp_assoc_value instead [ 452.448951][T17433] netlink: 'syz.0.4248': attribute type 10 has an invalid length. [ 452.508130][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.515412][T17433] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.478233][T17452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4254'. [ 453.556746][T17463] FAULT_INJECTION: forcing a failure. [ 453.556746][T17463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.577336][T17462] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4258'. [ 453.588237][T17463] CPU: 1 PID: 17463 Comm: syz.4.4256 Not tainted syzkaller #0 [ 453.595725][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.605783][T17463] Call Trace: [ 453.609063][T17463] [ 453.611983][T17463] dump_stack_lvl+0x188/0x250 [ 453.616652][T17463] ? show_regs_print_info+0x20/0x20 [ 453.621841][T17463] ? load_image+0x400/0x400 [ 453.626334][T17463] ? __lock_acquire+0x7d10/0x7d10 [ 453.631339][T17463] ? vfs_write+0x8b2/0xd60 [ 453.635743][T17463] should_fail+0x38c/0x4c0 [ 453.640148][T17463] _copy_from_user+0x2e/0x170 [ 453.644809][T17463] __sys_bpf+0x26d/0x6f0 [ 453.649044][T17463] ? bpf_link_show_fdinfo+0x380/0x380 [ 453.654408][T17463] ? vtime_user_exit+0x2c8/0x3e0 [ 453.659328][T17463] __x64_sys_bpf+0x78/0x90 [ 453.663730][T17463] do_syscall_64+0x4c/0xa0 [ 453.668127][T17463] ? clear_bhb_loop+0x30/0x80 [ 453.672784][T17463] ? clear_bhb_loop+0x30/0x80 [ 453.677442][T17463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.683316][T17463] RIP: 0033:0x7fdfe8208cb9 [ 453.687716][T17463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.707307][T17463] RSP: 002b:00007fdfe6443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.715706][T17463] RAX: ffffffffffffffda RBX: 00007fdfe8484090 RCX: 00007fdfe8208cb9 [ 453.723662][T17463] RDX: 0000000000000038 RSI: 00002000000012c0 RDI: 0000000000000019 [ 453.731621][T17463] RBP: 00007fdfe6443090 R08: 0000000000000000 R09: 0000000000000000 [ 453.739578][T17463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.747531][T17463] R13: 00007fdfe8484128 R14: 00007fdfe8484090 R15: 00007ffcb3b5c6f8 [ 453.755496][T17463] [ 453.801471][T17452] device bridge_slave_0 left promiscuous mode [ 453.849144][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.241708][T17466] team0: Port device team_slave_0 removed [ 454.276658][T17466] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 454.782356][T17489] device syzkaller0 entered promiscuous mode [ 456.006211][T17545] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4283'. [ 457.292348][T17590] tun0: tun_chr_ioctl cmd 1074025677 [ 457.319135][T17590] tun0: linktype set to 804 [ 457.355217][T17590] netlink: 'syz.0.4301': attribute type 1 has an invalid length. [ 457.389594][T17590] netlink: 'syz.0.4301': attribute type 3 has an invalid length. [ 457.397561][T17590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4301'. [ 457.421056][T17590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4301'. [ 457.569673][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 457.943986][T17619] device syzkaller0 entered promiscuous mode [ 457.997027][T17621] netlink: 'syz.0.4311': attribute type 1 has an invalid length. [ 458.007975][T17621] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4311'. [ 459.460350][T17673] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.4326'. [ 460.076851][T17701] netlink: 'syz.4.4336': attribute type 21 has an invalid length. [ 460.124440][T17700] netlink: 'syz.4.4336': attribute type 21 has an invalid length. [ 460.177678][T17701] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4336'. [ 460.183828][T17707] FAULT_INJECTION: forcing a failure. [ 460.183828][T17707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.215907][T17707] CPU: 0 PID: 17707 Comm: syz.2.4338 Not tainted syzkaller #0 [ 460.223412][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.233477][T17707] Call Trace: [ 460.236766][T17707] [ 460.239702][T17707] dump_stack_lvl+0x188/0x250 [ 460.244391][T17707] ? show_regs_print_info+0x20/0x20 [ 460.249606][T17707] ? load_image+0x400/0x400 [ 460.254121][T17707] ? __lock_acquire+0x7d10/0x7d10 [ 460.259166][T17707] should_fail+0x38c/0x4c0 [ 460.263600][T17707] strncpy_from_user+0x32/0x360 [ 460.268467][T17707] tcp_setsockopt+0x497/0x1e90 [ 460.273237][T17707] ? aa_sk_perm+0x7dc/0x910 [ 460.277753][T17707] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 460.283138][T17707] ? aa_sock_opt_perm+0x74/0x100 [ 460.288078][T17707] ? sock_common_setsockopt+0x32/0xb0 [ 460.293459][T17707] ? sock_common_recvmsg+0x1c0/0x1c0 [ 460.298754][T17707] __sys_setsockopt+0x2bf/0x3d0 [ 460.303620][T17707] __x64_sys_setsockopt+0xb1/0xc0 [ 460.308655][T17707] do_syscall_64+0x4c/0xa0 [ 460.313095][T17707] ? clear_bhb_loop+0x30/0x80 [ 460.317774][T17707] ? clear_bhb_loop+0x30/0x80 [ 460.322458][T17707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.328357][T17707] RIP: 0033:0x7fb598c5ecb9 [ 460.332779][T17707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.352392][T17707] RSP: 002b:00007fb596eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.360803][T17707] RAX: ffffffffffffffda RBX: 00007fb598ed9fa0 RCX: 00007fb598c5ecb9 [ 460.368758][T17707] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004 [ 460.376730][T17707] RBP: 00007fb596eba090 R08: 0000000000000011 R09: 0000000000000000 [ 460.384701][T17707] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 460.392744][T17707] R13: 00007fb598eda038 R14: 00007fb598ed9fa0 R15: 00007ffcecfdc578 [ 460.400719][T17707] [ 460.415981][T17703] device syzkaller0 entered promiscuous mode [ 460.510272][T17711] netlink: 'syz.4.4339': attribute type 10 has an invalid length. [ 460.546775][T17711] device hsr0 entered promiscuous mode [ 460.599569][T17711] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.628693][T17711] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 460.657846][T17711] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 460.671444][T17711] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 460.683131][T17707] device syzkaller0 entered promiscuous mode [ 462.277828][T17764] device syzkaller0 entered promiscuous mode [ 463.090202][T17769] netlink: 64519 bytes leftover after parsing attributes in process `syz.0.4356'. [ 464.035391][T17807] netlink: 'syz.4.4368': attribute type 3 has an invalid length. [ 464.064339][T17807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4368'. [ 464.083145][T17811] netlink: 64519 bytes leftover after parsing attributes in process `syz.3.4370'. [ 464.933952][T17861] netlink: 'syz.0.4383': attribute type 10 has an invalid length. [ 464.984149][T17861] device hsr0 entered promiscuous mode [ 465.181351][T17861] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.263277][T17861] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 465.290336][T17861] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 465.367671][T17861] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 483.488711][T17117] Bluetooth: hci6: command 0x0409 tx timeout [ 483.496024][T17117] Bluetooth: hci7: command 0x0409 tx timeout [ 483.568871][T17117] Bluetooth: hci0: command 0x0409 tx timeout [ 483.575029][T17117] Bluetooth: hci9: command 0x0409 tx timeout [ 483.587749][T17117] Bluetooth: hci8: command 0x0409 tx timeout [ 485.568898][T17117] Bluetooth: hci7: command 0x041b tx timeout [ 485.575993][T17117] Bluetooth: hci6: command 0x041b tx timeout [ 485.648855][T17117] Bluetooth: hci8: command 0x041b tx timeout [ 485.658868][T17117] Bluetooth: hci9: command 0x041b tx timeout [ 485.667546][T17117] Bluetooth: hci0: command 0x041b tx timeout [ 487.648734][T17101] Bluetooth: hci6: command 0x040f tx timeout [ 487.655859][T17101] Bluetooth: hci7: command 0x040f tx timeout [ 487.728871][T17101] Bluetooth: hci0: command 0x040f tx timeout [ 487.734991][T17101] Bluetooth: hci9: command 0x040f tx timeout [ 487.747350][T17101] Bluetooth: hci8: command 0x040f tx timeout [ 489.728710][T17117] Bluetooth: hci7: command 0x0419 tx timeout [ 489.734813][T17117] Bluetooth: hci6: command 0x0419 tx timeout [ 489.808876][T17117] Bluetooth: hci8: command 0x0419 tx timeout [ 489.814978][T17117] Bluetooth: hci9: command 0x0419 tx timeout [ 489.827363][T17117] Bluetooth: hci0: command 0x0419 tx timeout [ 544.208631][T17097] Bluetooth: hci10: command 0x0409 tx timeout [ 544.368624][T17097] Bluetooth: hci11: command 0x0409 tx timeout [ 544.448669][T17097] Bluetooth: hci13: command 0x0409 tx timeout [ 544.528770][T17097] Bluetooth: hci12: command 0x0409 tx timeout [ 544.537408][T17097] Bluetooth: hci14: command 0x0409 tx timeout [ 546.288615][T17097] Bluetooth: hci10: command 0x041b tx timeout [ 546.448671][T17097] Bluetooth: hci11: command 0x041b tx timeout [ 546.528674][T17097] Bluetooth: hci13: command 0x041b tx timeout [ 546.608685][T17097] Bluetooth: hci14: command 0x041b tx timeout [ 546.618924][T17097] Bluetooth: hci12: command 0x041b tx timeout [ 548.368634][T17097] Bluetooth: hci10: command 0x040f tx timeout [ 548.528676][T17097] Bluetooth: hci11: command 0x040f tx timeout [ 548.608630][T17097] Bluetooth: hci13: command 0x040f tx timeout [ 548.688682][T17097] Bluetooth: hci12: command 0x040f tx timeout [ 548.696083][T17097] Bluetooth: hci14: command 0x040f tx timeout [ 550.448621][T17097] Bluetooth: hci10: command 0x0419 tx timeout [ 550.608630][T17097] Bluetooth: hci11: command 0x0419 tx timeout [ 550.688619][T17097] Bluetooth: hci13: command 0x0419 tx timeout [ 550.768633][T17097] Bluetooth: hci14: command 0x0419 tx timeout [ 550.774799][T17097] Bluetooth: hci12: command 0x0419 tx timeout [ 570.168509][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 570.175480][ C1] rcu: 0-....: (1 GPs behind) idle=485/1/0x4000000000000002 softirq=49345/49347 fqs=5247 [ 570.186495][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17856 [ 570.193885][ C1] (detected by 1, t=10502 jiffies, g=67953, q=1416) [ 570.200572][ C1] Sending NMI from CPU 1 to CPUs 0: [ 570.205781][ C0] NMI backtrace for cpu 0 [ 570.205790][ C0] CPU: 0 PID: 17856 Comm: syz.4.4386 Not tainted syzkaller #0 [ 570.205804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.205813][ C0] RIP: 0010:lock_release+0x2a8/0x8a0 [ 570.205836][ C0] Code: f0 ff 42 0f b6 04 2b 84 c0 0f 85 bc 04 00 00 41 89 3e 45 85 ff 4c 8b 7c 24 20 0f 85 9f 02 00 00 48 8b 44 24 40 42 0f b6 04 28 <84> c0 0f 85 73 04 00 00 48 8b 04 24 89 10 4c 89 e0 48 c1 e8 03 42 [ 570.205848][ C0] RSP: 0018:ffffc900030bf560 EFLAGS: 00000083 [ 570.205860][ C0] RAX: 0000000000000000 RBX: 1ffff11007bf88dc RCX: 0000000000000001 [ 570.205870][ C0] RDX: 0000000000000002 RSI: ffffffff8c31eaa0 RDI: ffff88803dfc46c0 [ 570.205880][ C0] RBP: ffffc900030bf670 R08: ffffffff8d89d8af R09: 1ffffffff1b13b15 [ 570.205891][ C0] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: ffff88803dfc46c0 [ 570.205902][ C0] R13: dffffc0000000000 R14: ffff88803dfc46e0 R15: 0000000000000046 [ 570.205912][ C0] FS: 000055555c52f500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 570.205925][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.205935][ C0] CR2: 00007fb84e05fe9c CR3: 000000003d3b1000 CR4: 00000000003506f0 [ 570.205948][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 570.205957][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 570.205966][ C0] Call Trace: [ 570.205972][ C0] [ 570.205981][ C0] ? rcu_lock_release+0x9/0x20 [ 570.205999][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 570.206020][ C0] perf_event_output_forward+0x261/0x2e0 [ 570.206036][ C0] ? perf_get_page_size+0x430/0x430 [ 570.206052][ C0] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 570.206070][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 570.206086][ C0] __perf_event_overflow+0x364/0x530 [ 570.206103][ C0] perf_tp_event+0x383/0xbf0 [ 570.206119][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 570.206132][ C0] ? __perf_event_overflow+0x415/0x530 [ 570.206169][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 570.206186][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 570.206202][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 570.206218][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 570.206234][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 570.206251][ C0] ? lock_chain_count+0x20/0x20 [ 570.206268][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 570.206281][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 570.206298][ C0] trace_hardirqs_on+0x57/0x80 [ 570.206312][ C0] asm_sysvec_irq_work+0x16/0x20 [ 570.206325][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 570.206341][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 c2 ef 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 570.206353][ C0] RSP: 0018:ffffc900030bfcc0 EFLAGS: 00000206 [ 570.206364][ C0] RAX: 1f1c89a88a483d00 RBX: 1ffff92000617f9c RCX: 1f1c89a88a483d00 [ 570.206375][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 570.206385][ C0] RBP: ffffc900030bfd88 R08: ffffffff901d10cf R09: 1ffffffff203a219 [ 570.206396][ C0] R10: dffffc0000000000 R11: fffffbfff203a21a R12: 0000000000000000 [ 570.206406][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8c322fe0 [ 570.206431][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 570.206445][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 570.206459][ C0] ? __rwlock_init+0x140/0x140 [ 570.206471][ C0] ? radix_tree_delete_item+0x2df/0x3f0 [ 570.206492][ C0] __rcu_read_unlock+0x78/0xd0 [ 570.206507][ C0] rcu_read_unlock+0x85/0x90 [ 570.206521][ C0] dput+0xc0/0x1a0 [ 570.206533][ C0] __fput+0x5ee/0x930 [ 570.206553][ C0] task_work_run+0x125/0x1a0 [ 570.206571][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 570.206585][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 570.206602][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 570.206619][ C0] do_syscall_64+0x58/0xa0 [ 570.206632][ C0] ? clear_bhb_loop+0x30/0x80 [ 570.206645][ C0] ? clear_bhb_loop+0x30/0x80 [ 570.206658][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.206672][ C0] RIP: 0033:0x7fdfe8208cb9 [ 570.206688][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.206700][ C0] RSP: 002b:00007ffcb3b5c858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 570.206713][ C0] RAX: 0000000000000000 RBX: 00007ffcb3b5c940 RCX: 00007fdfe8208cb9 [ 570.206722][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 570.206731][ C0] RBP: 00000000000717ea R08: 0000000000000001 R09: 0000000000000000 [ 570.206739][ C0] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffcb3b5c980 [ 570.206749][ C0] R13: 00007fdfe8483fac R14: 00000000000718fd R15: 00007fdfe8483fa0 [ 570.206766][ C0] [ 570.206776][ C1] task:syz.4.4386 state:R running task stack:27600 pid:17856 ppid: 13051 flags:0x0000400c [ 570.688041][ C1] Call Trace: [ 570.691319][ C1] [ 570.694271][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 570.699994][ C1] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 570.706235][ C1] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 570.713425][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 570.719407][ C1] ? lock_chain_count+0x20/0x20 [ 570.724257][ C1] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 570.729969][ C1] ? trace_irq_enable_rcuidle+0x108/0x180 [ 570.735683][ C1] ? sysvec_irq_work+0x7d/0xc0 [ 570.740455][ C1] ? trace_hardirqs_on+0x57/0x80 [ 570.745389][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 570.750506][ C1] ? rcu_read_unlock_special+0x7f/0x4a0 [ 570.756112][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 570.761140][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 570.766075][ C1] ? __rwlock_init+0x140/0x140 [ 570.770831][ C1] ? radix_tree_delete_item+0x2df/0x3f0 [ 570.776381][ C1] ? __rcu_read_unlock+0x78/0xd0 [ 570.781313][ C1] ? rcu_read_unlock+0x85/0x90 [ 570.786070][ C1] ? dput+0xc0/0x1a0 [ 570.789960][ C1] ? __fput+0x5ee/0x930 [ 570.794129][ C1] ? task_work_run+0x125/0x1a0 [ 570.798894][ C1] ? exit_to_user_mode_loop+0x10f/0x130 [ 570.804435][ C1] ? exit_to_user_mode_prepare+0xee/0x180 [ 570.810150][ C1] ? syscall_exit_to_user_mode+0x16/0x40 [ 570.815776][ C1] ? do_syscall_64+0x58/0xa0 [ 570.820357][ C1] ? clear_bhb_loop+0x30/0x80 [ 570.825026][ C1] ? clear_bhb_loop+0x30/0x80 [ 570.829698][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.835802][ C1]